KrbEtypeInsight

Predicts which accounts, services and clients a Kerberos encryption type hardening change will break, before the change is made. Collects events 4768, 4769 and 4771 from domain controllers or archived logs, decodes ticket encryption types and msDS-SupportedEncryptionTypes bitmasks, correlates observed behaviour against directory configuration and d... More info