asrep_roastable
Identify users without Kerberos pre-auth enabled to expose AS-REP roastable accounts for password cracking attacks.
Instructions
Enabled users that do not require Kerberos pre-auth (AS-REP roastable). (requête vérifiée)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| k | No | asrep_roastable | |
| cy | No | MATCH (u:User) WHERE u.dontreqpreauth = true AND u.enabled = true RETURN u.name AS name ORDER BY name |