Detecting LDAP based Kerberoasting with Azure ATP
In a typical Kerberoasting attack, attackers exploit LDAP vulnerabilities to generate a list of all user accounts with a Kerberos Service Principal Name (SPN) available. Once successful at listing these accounts, attackers grant Kerberos Service Ticket… Continue reading Detecting LDAP based Kerberoasting with Azure ATP