value:  Operation Wocao has used PowerSploit's Invoke-Kerberoast module to request encrypted service tickets and bruteforce the passwords of Windows service accounts offline. 
name: Steal or Forge Kerberos Tickets: Kerberoasting