DefCamp Day 2 Track #3 - Balcescu 24m talk 4m read New Kerberos Attack Vector : Disabled SPN Kerberoasting at DefCamp 2025 Yeonwoo Park offensive securityidentity and access