Threat Analysis · · 3 min read
Kerberoasting explained: how any domain user can steal a service account password
Why every domain user can request tickets that expose service account passwords, how defenders spot Kerberoasting in event 4769 and how to make it fail.