kerberos

microsoft

Kerberoasting

Mitre ATT&CK technique T1558.003 or more commonly known as Kerberoasting, is a technique that allows a malicious actor to brute force Kerberos TGS(ticket-granting service) tickets offline. This technique requires Active Directory and a user with an SPN(service principal name). Here I will not be covering

microsoft

DCSync

DCSync is a powerful tool in the hands of a red teamer and a nightmare for Blue teamers. For the blue teamer all is not lost. This type of attack may not be feasible to stop but it can be detected. Abstract Here I will show how you can quickly