Interesting post here: http://dfir-blog.com/2015/12/13/protecting-windows-networks-kerberos-attacks/ Still reading it myself to try and understand if it's a real issue of not, but thought the list would be interested. Jeremy.