Active Directory Security Tip #16: Mitigating Kerberoast Attacks

There are two main password attacks leveraged by adversaries; one is called Password Spraying and the other is called Kerberoasting. This post focuses on identifying…

A short excerpt. Read the linked source for the full article and context.

Monitored guidance in the same product area; this does not establish that the article cites each page.

• NTLMv1 hardening guidance
• SMB signing hardening guidance
• AD LDAP signing and channel binding
• AD LDAP signing enforcement policies
• AD LDAP session security requirements