Why DES and RC4 Still Matter in AD Crypto Discussions
Lab klist encryption types, supported-etype table, GPO ‘Configure encryption types allowed for Kerberos’ — inventory, not cracking.
Kerberos
Kerberos Ticket Times and Checksums for Forensics
Lab klist dump, field-by-field decode of times and checksum types, clock-skew 401 — no ticket-forging steps.
Windows Delegation Edge Cases: Constrained, Unconstrained, and RBCD
Lab klist/setspn dumps redacted, unconstrained vs constrained vs RBCD text diagrams — flags and ACLs, not an abuse chain.
Kerberos Constrained Delegation Map for Analysts
Lab klist and setspn dumps redacted, constrained-delegation allow-list map — no ticket forging, no S4U abuse.