Forum Discussion

andre4000's avatar
andre4000
Copper Contributor
Jun 24, 2022

Suspected suspicious Kerberos ticket request on one endpoint

Hi

 

The documentation for the alert “Suspected suspicious Kerberos ticket request on one endpoint”  with 

UniqueExternalId  2418 seems to be missing.

The alert references https://aka.ms/suspiciouskerberosticketrequest, which  leads to the Bing search engine page.

 

Nothing here either:
https://docs.microsoft.com/en-us/defender-for-identity/suspicious-activity-guide

 

Is there any further documentation available or planned?

 

Thanks

  • andre4000's avatar
    andre4000
    Copper Contributor

    EliOfekany comments perhaps? I see the aka.ms shortcut has been fixed but now just points to the second link noted above, which still does not contain any further detail.

    • Daniel Naim's avatar
      Daniel Naim
      Icon for Microsoft rankMicrosoft
      We will add the information about this alert in our public docs soon.

Resources