NexurAI
50 practical, no-fluff guides on detection engineering, SOC triage, threat hunting, cloud, DFIR and AI security. Free to read - then practice what you learn in the labs.
3 guides
Any domain user can request service tickets and crack them offline for service-account passwords. Here's how Kerberoasting works and the detections that catch it.
Read guideWith the KRBTGT hash, an attacker forges Kerberos tickets and owns the domain invisibly. Learn how Golden/Silver tickets work and how defenders respond.
Read guideNTLM relay lets an attacker authenticate as a victim without ever cracking a password. Learn the coercion-to-relay chain and how to shut it down.
Read guide