AS-REP Roasting
Adversaries may reveal credentials of accounts that have disabled Kerberos preauthentication by [Password Cracking](https://attack.mitre.org/techniques/T1110/002) Kerberos messages.(Citation: Harmj0y Roasting AS-REPs Jan 2017) Preauthentication offers protection against offline [Password Cracking](https://attack.mitre.org/techniques/T1110/002). When enabled, a user requesting access to a resource initiates communication with the Domain Controller (DC) by sending an Authentication Server Reques...
BY SOURCE
PROCEDURES (6)
Auto-extracted: 2 detections for script block
Auto-extracted: 2 detections for lateral
Auto-extracted: 1 detections for brute force
Auto-extracted: 1 detections for brute force
Auto-extracted: 1 detections for authentication monitoring
Auto-extracted: 1 detections for network connection monitoring