Golden Ticket
Named by 3 kept items in this workspace.
2 items name it under classification.key entities and 1 under techniques.
Search every workspace for Golden Ticket. It matches the name as written, so it can find other things that share it.
The items that name it 3
Forging a TGT for any user using a compromised KRBTGT account password hash (e.g. RC4 hash), bypassing normal authentication
All techniques in this workspace.