Jul 8, 2026 Active Directory 1 min read Targeted Kerberoasting by writing an SPN With write access to a user object, set a fake SPN, roast the ticket offline, then remove the SPN. kerberoasting kerberos