Rubeus
Named by 4 kept items in this workspace.
Search every workspace for Rubeus. It matches the name as written, so it can find other things that share it.
The items that name it 4
Kerberos abuse tool; explicitly outside this bundle's scope
Tool using wldap32.dll that generates Event ID 30 client-side LDAP logs, example used for OID query attribution
Used to execute Kerberoasting and AS-REP Roasting attacks in the lab to demonstrate detection via PerfMon counters
Perform Kerberos attacks: asreproast, kerberoast functions, S4U (S4U2Self/S4U2Proxy) requests for constrained delegation and RBCD abuse, extracting/importing TGTs
All technologies in this workspace.