> ## Documentation Index
> Fetch the complete documentation index at: https://docs.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# ticket_cache_purge

> Converted from Markdown to MDX

<Note>Artifacts Generated:  WindowsAPIInvoke</Note>

## Summary

Remove the specified ticket(s) from the current logon session, this uses LSA APIs to delete tickets from the active logon session on the host.

### Arguments

#### serviceName

the name of the service to remove, needs to include the domain name, not required if -all flag is present

#### All (Optional)

Argument flag to remove all tickets from the current logon session

#### luid (Optional)

Optional argument to remove a ticket from the cache of a different logon session, must be elevated.

## Usage

```
ticket_cache_purge -luid [luidValue] -serviceName  [serviceName] -All
```

Example

```
ticket_cache_purge -serviceName  ldap/machineName.DomainName.local/domainName.local@DomainName.local
ticket_cache_purge -serviceName  cifs/machineName@DomainName.local
ticket_cache_purge -all
ticket_cache_purge -luid 0xabcd123 -serviceName  cifs/machineName@DomainName.local
ticket_cache_purge -luid 0xabcd123  -All
```

## MITRE ATT\&CK Mapping

* T1550