حمله علیه کربروس در اکتیو دایرکتوری بنام #Kerberoasting است
چطور با آن مقابله کنیم ؟
Configure securely your Kerberos-related domain controller policies and settings.
Enable AES Kerberos encryption or another stronger encryption algorithm, rather than RC4, where possible.
Consider using Group Managed Service Accounts rather than service accounts with static passwords
Consider upgrading to an Active Directory Domain or forest level which supports advanced Kerberos armoring.
Ensure all of your service accounts have randomly generated 25+ character passwords
#آکادمی_روزبه
چطور با آن مقابله کنیم ؟
Configure securely your Kerberos-related domain controller policies and settings.
Enable AES Kerberos encryption or another stronger encryption algorithm, rather than RC4, where possible.
Consider using Group Managed Service Accounts rather than service accounts with static passwords
Consider upgrading to an Active Directory Domain or forest level which supports advanced Kerberos armoring.
Ensure all of your service accounts have randomly generated 25+ character passwords
#آکادمی_روزبه