Detections
Analytics
Kerberos Configuration on User Account
medium
Language:
Description
Active Directory relies on Kerberos for authentication. It is an older protocol that has since received various security hardening measures. For this reason, it's necessary to disable some legacy options to ensure proper security.
Solution
To ensure the highest level of security, configure the Active Directory's authentication protocol to use the latest security parameters and protocols.
See Also
Authentication secrets part II - Kerberos strikes-back