How Kerberoasting cracks passwords without "hacking” anything

October is Cybersecurity Awareness Month , a good time to look at the attacks that are hardest to see. This is the third post in our three-part series on the most destructive identity attacks, and how identity and security teams can mitigate their impact. The first two parts of this series covered Golden Ticket and DCShadow attacks that rely on exploiting trust.