| Event Id | 4770 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A Kerberos service ticket was renewed. Account Information: Account Name:<Account Name> Account Domain:<Domain name> Service Information: Service Name:<Service Name> Service ID: <Service ID> Network Information: Client Address:<Client Address> Client Port: <Client Port> Additional Information: Ticket Options:<Ticket Options> Ticket Encryption Type:<Ticket Encryption Type> |
| Event Information | Cause : This event is logged when a Kerberos service ticket was renewed. Kerberos limits how long a ticket is valid. If a ticket expires when the user is still logged on, Windows automatically contacts the domain controller to renew the ticket which triggers this event. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.