Active Directory Kerberoasting: The Complete Guide to Mechanics, Attack, and Defense A complete guide to Kerberoasting: how SPNs and TGS-REP enable offline cracking, plus detection and defense. 2026.06.11 Active Directory