author: Mauricio Velazco
id: 128ee70f-7f05-4ebe-ac86-7bc54f3edac1
date: '2022-09-09'
description: 'Automated generation of attack data using PurpleSharp: Kerberos Password
  Spraying with 50 disabled domain users'
environment: attack_range
dataset:
- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1110.003/purplesharp_disabled_users_kerberos_xml/windows-security.log
sourcetypes:
- WinEventLog:Security
sourcetypes:
- XmlWinEventLog
references:
- https://attack.mitre.org/techniques/T1110/003/
- https://github.com/mvelazc0/PurpleSharp
- https://github.com/mvelazc0/PurpleAD/tree/main/Credential%20Access
