Skip to content

Authentication

Service to Silver Ticket Reference

Service TypeService Silver Tickets
WMIHOST
RPCSS
PowerShell RemotingHOST
HTTP

Depending on OS version may also need:
WSMAN
RPCSS
WinRMHOST
HTTP
Scheduled TasksHOST
Windows File Share (CIFS)CIFS
LDAP operations including Mimikatz DCSyncLDAP
Windows Remote Server Administration ToolsRPCSS
LDAP
CIFS

Source: https://adsecurity.org/?p=2011