DETECTION OVERVIEW
Category

An application on the network had an unusual degradation in Kerberos server performance, which indicates that authentication services might be slow.
Kerberos is a security protocol that applies mutual, secret-key cryptography to client and server authentication, and requires that both the user and server prove their identities. A spike in Kerberos server processing time indicates resource exhaustion. This issue might be related to an overloaded domain controller due to a high volume of authentication requests.
Check the Kerberos Key Distribution Center (KDC) for high CPU or memory usage that could delay ticket granting.
Ensure the Active Directory database (NTDS.dit) is properly defragmented to provide low latency storage.
Verify that there are no resource bottlenecks in the network path to the Kerberos server.
Network analysis and visibility solutions remain underrepresented in enterprises. Find out why in this preview of a new Wave report.
Learn more
ExtraHop® Named a Leader in First-Ever Gartner® Magic Quadrant™ for Network Detection and Response
Learn more
Visit this resource for more information.
Learn more
