Talk With an Expert

Hunting the Hound of Hades: Kerberos Delegation Attacks, Detections and Defenses

Hunting the Hound of Hades: Kerberos Delegation Attacks, Detections and Defenses (PDF, 4.16MB)Published: 23 Dec, 2024
Created by:
Ben Boyle

When misconfigured, Kerberos delegation in an Active Directory environment can lead to complete domain compromise. From its initial inclusion in Windows 2000 Server to its current implementation in Windows Server 2025, the Kerberos protocol has undergone refinements and design updates to harden its attack surface.