In case you haven't heard, there is a critical Kerberos bug that you need to updating, right now. More information on the vulnerability can be found here. In the "Detection Guidance" section of the above blog post, you will see that you can detect if the vulnerability has been exploited on an unpatched machine by analyzing the Security event logs. Specifically, looking at Event ID 4624 logon ev…