Kerberos & Authentication
Rotating the krbtgt password safely in Active Directory
Rotate krbtgt without an outage: New-KrbtgtKeys.ps1, replication checks, RODC krbtgt accounts, a routine schedule and the incident-mode double reset.
Intermediate
Guides tagged
#krbtgt
Kerberos & Authentication
Kerberos hardening: RC4, roasting and golden tickets
Enforce AES-only Kerberos, disable RC4 and DONT_REQ_PREAUTH, rotate krbtgt correctly, and detect Kerberoasting and golden ticket abuse.
Foundation