Threat Intel
2 min read
Kerberoasting in 2026: Why This Attack Still Works on Your AD
Kerberoasting persists because most environments still have SPN-mapped service accounts with RC4 enabled and passwords that have not rotated in years. Here is what continuous ISPM monitoring catches and what good looks like.
R
Retrievy Team