Tool

github.com/CICADA8-Research/RemoteKrbRelay/blob/main/README.md

https://github.com/CICADA8-Research/RemoteKrbRelay/blob/main/README.md

Published on: github.com

ATT&CK techniques those detections carry

T1187Forced Authentication
T1557Adversary-in-the-Middle
T1557.001Name Resolution Poisoning and SMB Relay
T1550Use Alternate Authentication Material

3 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Potential Kerberos SPN Spoofing via Suspicious DNS Query	High	Elastic detection rules	Sep 20, 2026	Elastic License 2.0
Potential Kerberos Coercion via DNS-Based SPN Spoofing	High	Elastic detection rules	Sep 20, 2026	Elastic License 2.0
Potential Kerberos Relay Attack against a Computer Account	High	Elastic detection rules	Sep 20, 2026	Elastic License 2.0

Showing 3 of 3

Filter in the catalogue