As cited
Copy frozen at (site build).
threat intel
PerfMon! What Is It Good For? | Huntress
Performance Monitor (PerfMon) counters offer an alternative detection method for Kerberos roasting attacks that complements traditional Windows event monitoring. The approach provides security teams with additional visibility into attack patterns beyond standard event logs 4768 and 4769. This diversified detection strategy strengthens defenders' ability to identify and respond to Kerberos-based credential attacks.
Why it matters: Security operations teams need multiple detection vectors for Kerberos roasting to catch sophisticated attackers who may evade traditional event-based monitoring, making PerfMon counters a valuable supplementary detection layer.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
PerfMon! What Is It Good For? | Huntress
Performance Monitor (PerfMon) counters offer an alternative detection method for Kerberos roasting attacks that complements traditional Windows event monitoring. The approach provides security teams with additional visibility into attack patterns beyond standard event logs 4768 and 4769. This diversified detection strategy strengthens defenders' ability to identify and respond to Kerberos-based credential attacks.
Why it matters: Security operations teams need multiple detection vectors for Kerberos roasting to catch sophisticated attackers who may evade traditional event-based monitoring, making PerfMon counters a valuable supplementary detection layer.
- Source published
- First seen by Cybersecurity Tracker