Ares-mythic/documentation-payload/apollo/commands/ticket_cache_add.md

+++ title = "ticket_cache_add" chapter = false weight = 103 hidden = false +++

{{% notice info %}} Artifacts Generated: WindowsAPIInvoke {{% /notice %}}

Summary

Add the specified ticket(s) into the current logon session, this uses LSA APIs to load tickets into the active logon session on the host.

Arguments

b64ticket

the base64 ticket to add to the store

Usage

ticket_cache_add -b64ticket [Value]

Example

ticket_cache_add -b64ticket [Value]

MITRE ATT&CK Mapping

• T1550