Skip to main content

​
Summary

Remove the specified ticket(s) from the agents internal ticket store

​
Arguments

​
serviceName

the name of the service to remove, needs to include the domain name, not required if -all flag is present

​
All (Optional)

Argument flag to remove all tickets from Apollo’s ticket store

​
Usage

ticket_store_purge -serviceName  [serviceName] -all
Example 
ticket_store_purge -serviceName  ldap/machineName.DomainName.local/domainName.local@DomainName.local
ticket_store_purge -serviceName  cifs/machineName@DomainName.local
ticket_store_purge -all

​
MITRE ATT&CK Mapping

  • T1550