Microsoft issues guidance on how best to hit back against Kerberoasting AD attacks
To spot an attack, admins should check for ticket requests with unusual Kerberos encryption types, check for alerts from ...