Golden ticket domain event log about mimikatz HOT 3 CLOSED

In fact this is a 'feature': https://twitter.com/gentilkiwi/status/639913689613733888
It helps to get scriptkiddies.

from mimikatz.

I disagree.
It was a good idea to leave that value there.

"If you don't want scriptkiddies to use mimikatz, ..."

@Raikia517 You didn't get the intention right.
The idea behind that value was not to avoid(!) script kiddies using mimikatz.
The idea was to detect(!) script kiddies using mimikatz.
That's a big difference.

I liked that value. Even nation state sponsored groups used and still use precompiled mimikatz binaries. (< I am not kidding - that's the sad truth)

from mimikatz.

Scriptkiddies vs twitter followers, really.

Its not a huge problem, just recompiling it was pretty simple once we figured out that was the issue. Not sure I agree with your idea of that as a feature to catch "scriptkiddies". If you don't want scriptkiddies to use mimikatz, dont release a public binary and force people to compile it themselves.

from mimikatz.