alekwisnia

Recently I've run into issue with "ESCU - Kerberoasting spn request with RC4 encryption - Rule" rule, which is based on kerberoasting_spn_request_with_rc4_encryption.yml. They both mention fields Ticket_Options and Ticket_Encryption_Type (the...