Weak Encryption Enabled and Kerberoast — Detection Rule

Detects scenario where weak encryption is enabled for a user profile which could be used for hash/password cracking.

Read the full analysis on IntelFusions