Ravi Sir's Cyber Security Cards › Interview Cards
What is Kerberoasting at a conceptual defensive level?
What is Kerberoasting at a conceptual defensive level? Kerberoasting : an attacker requests service tickets for accounts with SPNs, then cracks weak service passwords offline. A service account with a short password gets cracked away from the network. “Defence: gMSA or long random passwords, AES Ker
Read card text
What this card says
Short answer
Kerberoasting: an attacker requests service tickets for accounts with SPNs, then cracks weak service passwords offline.
Example
A service account with a short password gets cracked away from the network.
Say it in the interview
“Defence: gMSA or long random passwords, AES Kerberos types, and monitoring for odd ticket requests.”
Why it matters
Weak service-account passwords are a quiet path to wider access.
Learn more in the lesson: 46.9 AD, Malware, Session, IoT and Mobile — Defensive Talking Points