The Kerberos Key List Attack: The return of the Read Only Domain Controllers

https://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers/