🎙️ In this episode, Craig Birch breaks down one of Active Directory’s most overlooked threats: Kerberoasting via privileged accounts with Service Principal Names (SPNs).
You’ll learn how attackers exploit this common misconfiguration to extract service tickets and crack credentials offline — and how to identify and fix these accounts without breaking critical apps.
• What SPNs are — and why they matter for security
• How attackers Kerberoast high-value accounts
• Why ADUC won’t give you full visibility
• PowerShell + LDAP filters for fast SPN discovery
• How SDProp flags privileged accounts
• Why auto-remediation can backfire
• Safer alternatives: gMSAs, strong passwords, role reviews
🔍 What You’ll Learn:• What SPNs are — and why they matter for security
• How attackers Kerberoast high-value accounts
• Why ADUC won’t give you full visibility
• PowerShell + LDAP filters for fast SPN discovery
• How SDProp flags privileged accounts
• Why auto-remediation can backfire
• Safer alternatives: gMSAs, strong passwords, role reviews
🛠️ PowerShell Spotlight:Get-ADUser -LDAPFilter "(&(admincount=1)(servicePrincipalName=*))" `
-Properties servicePrincipalName |
Select-Object Name, servicePrincipalName
✅ Use this to find privileged accounts with SPNs — the ones most at risk of Kerberoasting.
Script it — don’t rely on ADUC
Never auto-remove SPNs without reviewing impact
Talk to app owners before making changes
Harden service accounts or move to gMSAs
Monitor SDProp-marked accounts to shrink attack surface
💬 Found this helpful? Like, share, or comment. Got a topic for a future 10-minute breakdown? Drop it below — we’re listening.
📌 Powered by Guardians of the Directory
Popular Podcasts
Las Culturistas with Matt Rogers and Bowen Yang
Ding dong! Join your culture consultants, Matt Rogers and Bowen Yang, on an unforgettable journey into the beating heart of CULTURE. Alongside sizzling special guests, they GET INTO the hottest pop-culture moments of the day and the formative cultural experiences that turned them into Culturistas. Produced by the Big Money Players Network and iHeartRadio.
On Purpose with Jay Shetty
I’m Jay Shetty host of On Purpose the worlds #1 Mental Health podcast and I’m so grateful you found us. I started this podcast 5 years ago to invite you into conversations and workshops that are designed to help make you happier, healthier and more healed. I believe that when you (yes you) feel seen, heard and understood you’re able to deal with relationship struggles, work challenges and life’s ups and downs with more ease and grace. I interview experts, celebrities, thought leaders and athletes so that we can grow our mindset, build better habits and uncover a side of them we’ve never seen before. New episodes every Monday and Friday. Your support means the world to me and I don’t take it for granted — click the follow button and leave a review to help us spread the love with On Purpose. I can’t wait for you to listen to your first or 500th episode!
Crime Junkie
Does hearing about a true crime case always leave you scouring the internet for the truth behind the story? Dive into your next mystery with Crime Junkie. Every Monday, join your host Ashley Flowers as she unravels all the details of infamous and underreported true crime cases with her best friend Brit Prawat. From cold cases to missing persons and heroes in our community who seek justice, Crime Junkie is your destination for theories and stories you won’t hear anywhere else. Whether you're a seasoned true crime enthusiast or new to the genre, you'll find yourself on the edge of your seat awaiting a new episode every Monday. If you can never get enough true crime... Congratulations, you’ve found your people. Follow to join a community of Crime Junkies! Crime Junkie is presented by audiochuck Media Company.