How to Detect a Golden Ticket

Roberto: I can look at something that's completely novel to me that I have no experience with and I can be like Yeah, that probably uses RPC. A story a story from when I was in the air force is like golden tickets had just first become a thing but nobody knew what they were. And we're like oh we got to go find that golden ticket But then it's like okay Well, how the hell are we supposed to detect a golden ticket if we don't even know what it is right? Roberto: How many people are integrating a detection That's based on process access events without actually even knowing what a handle is or what a process access event is?"