Andrea Draghetti 🎣Apr 17, 2025

Boost your #ThreatHunting game!
#FindUnusualSessions by @podalirius spots suspicious Kerberos sessions in Active Directory.
A must-have for any #BlueTeam!

GitHub: https://github.com/p0dalirius/FindUnusualSessions

#CyberSecurity #DFIR #ADSecurity #BlueTeamTools

GitHub - p0dalirius/FindUnusualSessions: A tool to remotely detect unusual sessions opened on windows machines using RPC

A tool to remotely detect unusual sessions opened on windows machines using RPC - p0dalirius/FindUnusualSessions

GitHub