SANS Webcast: Kerberos & Attacks 101
Learn ethical hacking: https://www.sans.org/sec560 Kerberos & Attacks 101 Presented by: Tim Medin Want to understand how Kerberos works? Would you like to understand modern Kerberos attacks? If so, then join Tim Medin as he walks you through how to attack Kerberos with ticket attacks and Kerberoasting. Well cover the basics of Kerberos authentication and then show you how the trust model can be exploited for persistence, pivoting, and privilege escalation. Tim is the founder and Principal Consultant at Red Siege (https://www.redsiege.com), a company focused to adversary emulation and penetration testing. Tim is also the SANS MSISE Program Director and author of several SANS courses. Through the course of his career, Tim has performed penetration tests on a wide range of organizations and technologies. He gained information security experience in a variety of industries including previous positions in control systems, higher education, financial services, and manufacturing. Tim is an experienced international speaker, having presented to organizations around the world. Tim is also the creator of Kerberoasting, a technique to extract kerberos tickets in order to offline attack the password of enterprise service accounts. Tim earned his MBA through the University of Texas.

SANS DFIR Webcast - Incident Response Event Log Analysis

Kerberos and Attacks 101 - Tim Medin

Kerberos Explained (Animated)

Emulating and Detecting Kerberoasting | Red Canary

Investigating WMI Attacks

Kerberos Pass-The-Ticket Basics

Web Hacking for Beginners! | HTB Trick Walkthrough

Red Vs. Blue: Modern Active Directory Attacks, Detection, And Protection

Taming Kerberos - Computerphile

SANS Webcast: PowerShell for PenTesting

Common Active Directory Attacks: Back to the Basics of Security Practices

Attacking AI - Jason Haddix - NDC Security 2026

Investigating Malware Using Memory Forensics - A Practical Approach

Abusing Microsoft Kerberos: Sorry You Guys Don't Get It

TR19: Fun with LDAP and Kerberos: Attacking AD from non-Windows machines

Personal VPNs: Encryption Myths and Data Security Explained

DEF CON 26 - Sean Metcalf - Exploiting Active Directory Administrator Insecurities

Top Active Directory Attacks: Understand, then Prevent and Detect

Basic Kerberos Authentication

