---
id: 5882
title: "How to Protect Active Directory Against Kerberoasting: AD Security 101"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/protecting-active-directory-from-kerberoasting/"
published_at: "2023-08-25T22:16:07Z"
tags: ["active-directory", "credential-theft", "kerberos", "defense", "kerberoasting", "spn", "service-accounts"]
phying_url: "https://phying.com/item/5882"
lang: en
---

# How to Protect Active Directory Against Kerberoasting: AD Security 101

## Summary

Kerberoasting explained: any authenticated user can request service tickets encrypted with weak RC4/DES service-account hashes and crack them offline. Covers Kerberos/SPN basics and defenses.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2023-08-25T22:16:07Z
- **Original:** https://www.semperis.com/blog/protecting-active-directory-from-kerberoasting/
- **Phying News:** https://phying.com/item/5882