Watching the Watchdog - Protecting Kerberos Authentication With Network Monitoring

This course aims to teach learners how to protect Kerberos authentication using network monitoring. The learning outcomes include understanding why attackers target Kerberos, detecting and defeating attacks like Golden Ticket, Forged PAC, and Skeleton Key through network monitoring, and learning about the "Diamond PAC" attack variant. The course teaches skills such as detecting Kerberos attacks, using network monitoring for security, and utilizing the "Kerberos Leash" tool for defense. The teaching method involves a presentation of research findings and the release of a detection tool. The intended audience for this course includes cybersecurity professionals, network administrators, and individuals interested in enhancing their knowledge of network security and authentication protocols.