PtT

Pass the Ticket is a technique where attackers steal Kerberos tickets from a compromised machine and reuse them to authenticate as that user elsewhere in the domain. Variants like golden and silver tickets let attackers forge credentials with long-lasting, elevated access. It matters because it abuses the trust fabric of Active Directory itself, making cleanup after a breach difficult.