DC0084 Active Directory Credential Request
Requests for authentication credentials via Kerberos or other methods like NTLM and LDAP queries. Examples: - Kerberos TGT and Service Tickets (Event IDs 4768, 4769) - NTLM Authentication Events - LDAP Bind Requests.
01
detects techniques (9)
ATT&CK techniques this enables or maps to.
02
source
Where this definition is published.