TechniqueActive Directory
Pass-the-Ticket is a lateral movement technique that uses stolen Kerberos ticket material, specifically TGTs or TGS tickets extracted from memory, to authenticate as another user without knowing their password. This lesson explains what ticket material is reused, why the technique works, how it differs from Pass the Hash and ticket forgery, and how to communicate the risk clearly in interviews, reports, and stakeholder conversations.
Sign in or upgrade to unlock the full premium library.