Anthropic-Cybersecurity-Skills/skills/exploiting-constrained-delegation-abuse/references/standards.md

Standards and References - Constrained Delegation Abuse

MITRE ATT&CK References

Technique ID	Name	Tactic
T1558.003	Steal or Forge Kerberos Tickets: Kerberoasting	Credential Access
T1550.003	Pass the Ticket	Lateral Movement
T1134.001	Token Impersonation/Theft	Privilege Escalation
T1078.002	Valid Accounts: Domain Accounts	Persistence

Key Research

• ired.team: Kerberos Constrained Delegation abuse
• HackTricks: Constrained Delegation methodology
• GuidePoint Security: Delegating Like a Boss
• ManageEngine: Constrained delegation attacks explained
• SpecterOps: Delegation abuse research

Tools

• Rubeus: https://github.com/GhostPack/Rubeus
• Impacket getST.py: https://github.com/fortra/impacket
• PowerView: https://github.com/PowerShellMafia/PowerSploit