Skip to main content

Glossary

Kerberoasting

An attack against Active Directory environments in which an attacker requests Kerberos service tickets for accounts with a Service Principal Name, then attempts to crack the tickets offline to recover the account's plaintext password. It is popular with attackers because it can be performed by any authenticated domain user and generates minimal, easily overlooked log activity.

← All 285 glossary terms