Detection Script
For complete attack details, detection indicators, and mitigation strategies, see the Golden Ticket (Attack #11) section in the Five Eyes AD Attacks guide.
Golden Ticket Detection Script
Detect forged Kerberos TGTs using stolen KRBTGT account hash.