Skip to main content

Use CasesGet Started with Threat Detection, Investigation, and Response (TDIR) Use Case Categories

Pass the Ticket Scenario

Learn about the Lateral Movement Pass the Ticket scenario.

The Pass the Ticket scenario describes when an attacker uses stolen Kerberos tickets or the pass the ticket technique to move laterally in an environment and bypass system access controls.

In the Threat Detection, Investigation, and Response (TDIR) Use Case Categories hierarchy, the Pass the Ticket scenario falls under the Lateral Movement use case.