Good protocol info - https://adsecurity.org/?p=227

Attacking Kerberos

• https://files.sans.org/summit/hackfest2014/PDFs/Kicking%20the%20Guard%20Dog%20of%20Hades%20-%20Attacking%20Microsoft%20Kerberos%20%20-%20Tim%20Medin\(1\).pdf

Attack Kerberos w/o Mimikatz - http://www.harmj0y.net/blog/powershell/kerberoasting-without-mimikatz/

Roasting AS-REPS - http://www.harmj0y.net/blog/activedirectory/roasting-as-reps/

Kerberos Party Tricks

• http://www.exumbraops.com/blog/2016/6/1/kerberos-party-tricks-weaponizing-kerberos-protocol-flaws