All right.
Mitigation so just a couple options here.
Now Kerber hosting this is a feature of windows right.
We're abusing a feature so there's nothing that you can really do to defend against this except having
strong passwords for your service counts very strong passwords not 14 characters like we cracked like
30 characters or more.
You know the longer the better.
On top of that least privilege do not make your domain accounts domain administrators or do not make
your service accounts domain administrators right.
Lease privilege here too often we see service counts running as domain administrator and too often we
see service accounts running with weak passwords.
Combine those two and you're gonna have a bad day as a network administrator.
So that's it.
Pretty simple on the mitigation strategy.
So from here we're going to talk about an older but yet still relevant attack and this attack is called
C password attack or a GOP attack.
So we'll go ahead and see in the next video when we talk about this and revisit hack the box.