Come back to hash cracking later?

[7MinSec]

In "Privesc using Kerberoastable users" you hint that we'll come back to the info a little later in the course after saving secretsdump info from WINTERFELL. Will that be the case or do we have too much material to get through already?

[7MinSec]

Oohhh...what would be fun is open the .ntds version, remove all $ items and run through hashcat for more interesting stuff.

[7MinSec]

I modified the page to say "time permitting" for now, and I'm going to move this to a 1.1 curriculum goal.