Mar 25, 2026Mar 25, 2026 · 33 min read · 143 viewsDetecting AD Credential Attacks (TryHackMe)Introduction In August 2024, The DFIR Report documented a BlackSuit ransomware intrusion(opens in new tab) where the attackers used Rubeus to Kerberoast service accounts, AS-REP Roasted an account wit33 min read · 143 views