How to Defend Against SPN Scanning in Active Directory

Kerberoasting explained: any authenticated user can request service tickets encrypted with weak RC4/DES service-account hashes and crack them offline. Covers Kerberos/SPN basics and defenses.

Shares an infographic mapping common red team phishing attack workflows to blue team detective and preventative controls, plus practical stealth tips for both offensive operators and defenders.

Any domain user can query AD SPN records to enumerate every SQL Server—instances and ports included—without noisy scans; NetSPI's Get-SQLServerAccess module then tests each for accessible logins.

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

Why Microsoft is retiring RC4 encryption to blunt Kerberoasting, which applications depend on it, and how to audit your AD environment to find RC4-dependent accounts before enforcement bites.

LDAP reconnaissance lets attackers query AD for users, groups, computers, and privileges to find weak points. The post covers detection plus tools like AdFind and SharpHound.