Glossary
Kerberoasting
An attack against Active Directory environments in which an attacker requests Kerberos service tickets for accounts with a Service Principal Name, then attempts to crack the tickets offline to recover the account's plaintext password. It is popular with attackers because it can be performed by any authenticated domain user and generates minimal, easily overlooked log activity.