Logon Event Visualisation

How to detect forged Kerberos tickets.

Blauhaunt

Blauhaunt conducts filtering and visualization of logon events to help defenders understand where attackers are coming from and where they have got to during security incidents and threat hunts.

• https://github.com/cgosec/Blauhaunt

WonkaVision.exe /analyze /privatekey:C:\keys\private.key /dumpdir:C:\dumpshare\dumps