https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/Possible-Kerberoasting-without-SPNs?contentId=HKjW9qqy0HzZ1X70l~QUGQ
Possible Kerberoasting without SPNs
Synopsis Activation Period 14 Days Training Period 30 Days Test Period N/A (single event) Deduplication Period 1 Day Required Data Requires one of the...
possiblekerberoastingwithoutspns
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Analytics-Alert-Reference-by-Alert-name/Possible-Kerberoasting-without-SPNs?contentId=HKjW9qqy0HzZ1X70l~QUGQ
Possible Kerberoasting without SPNs
Synopsis Activation Period 14 Days Training Period 30 Days Test Period N/A (single event) Deduplication Period 1 Day Required Data Requires one of the...
possiblekerberoastingwithoutspns
https://dmcxblue.gitbook.io/red-team-notes/active-directory/untitled/untitled
Kerberoasting | Red Team Notes
red teamkerberoastingnotes
https://swisskyrepo.github.io/InternalAllTheThings/active-directory/ad-roasting-kerberoasting/
Roasting - Kerberoasting - Internal All The Things
Active Directory and Internal Pentest Cheatsheets
all theroastinginternalthings