---
id: 5832
title: "How to Defend Against SPN Scanning in Active Directory"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/how-to-defend-against-spn-scanning/"
published_at: "2024-07-12T22:40:47Z"
tags: ["active-directory", "reconnaissance", "defense", "detection", "kerberoasting", "spn-scanning"]
phying_url: "https://phying.com/item/5832"
lang: en
---

# How to Defend Against SPN Scanning in Active Directory

## Summary

SPN scanning enumerates service principal names in AD to uncover privileged service accounts, quietly setting up attacks like Kerberoasting. Explains how it works, how to detect it, and mitigations.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-07-12T22:40:47Z
- **Original:** https://www.semperis.com/blog/how-to-defend-against-spn-scanning/
- **Phying News:** https://phying.com/item/5832