Kerberos in Active Directory: How It Works, How It Is Abused, and How to Defend It
A deep dive into Kerberos authentication in Active Directory: AS-REQ/AS-REP, TGT/TGS, SPNs, delegation, Kerberoasting and AS-REP roasting, plus detection, auditing and hardening.

