Gems of Deception: Unearthing the Secrets of Sapphire and Diamond Tickets in Active Directory

No ratings

Presented at BSides San Diego 2025 by

Craig Jennings

Step into the advanced domain of Active Directory attacks as we detail the intricate workings of Sapphire and Diamond Tickets. Often overlooked next to their infamous relative, the Golden Ticket, these high-level threats offer unique challenges and opportunities for exploitation undetectable by conventional security measures. Join me as I demystify these powerful attack vectors, illustrate their use cases, and arm you with offensive security strategies that are a real gem to behold!