| T1208 - Kerberoasting | ||||
|---|---|---|---|---|
| Tools | PowerShell Invoke-Kerberoast | Rubeus kerberoast | mimikatz kerberos::ask | Rubeus asktgs |
| Managed Code | .NET KerberosRequestorSecurityToken | |||
| Windows API Functions | Secur32!InitializeSecurityContext | Secur32!LsaCallAuthenticationPackage | ||
| Remote Procedure Call | 4f32adc8-6052-4a04-8701-293ccf2096f0 C:\Windows\system32\Sspisrv.dll | |||
| Network Protocol | Kerberos TGS-REQ/REP | |||