ConceptsKerberoasting Detection

Kerberoasting Detection

Detecting kerberoasting by watching for its telltale signs in Active Directory, such as unusual volumes of service-ticket requests or requests using weak encryption, so the stealthy credential attack can be caught.

Glossary definition

6 direct links5 lessons

Concept Neighborhood

Explore this concept’s connections in the groups below.

Start here

Active Directory Security Architecture

A related concept to explore, covered by 5 lessons.

Open concept →

Relatedsorted by lesson coverage

Active Directory Security ArchitectureStart here

lessons

AD Attack Surfaces

lessons

DCSync Detection

lessons

Kerberos Ticket Forgery Detection

lessons

Pass-the-Hash Detection

lessons

Kerberoasting

lessons

Related Lessons

5 lessons cover this concept

Active Directory Architecture and ATT&CK Surface

IAM Engineer

AD Hardening: Accounts, Groups, and Policies

IAM Engineer

Detecting AD Attacks

IAM Engineer

Microsoft Entra ID Security Hardening

IAM Engineer

AD Recovery and Advanced Topics

IAM Engineer