Selective Kerberoast Prevention using DACLs

Kerberoasting is a rather in-vogue and effective attacker technique within Active Directory (AD) environments that was first popularized by Tim Medin in his 2014 talk “Attacking Kerberos: Kicking the Guard Dog of Hades”[1]. To perform a Kerberoast attack, an attacker...