Downgrade Kerberos Encryption

After gaining control of a network device that encrypts traffic, an adversary can alter its cryptographic implementation to weaken protection of network communications. Documented examples include reducing Diffie-Hellman keying strength by modifying Cisco IOS code and disabling dedicated crypto hardware so software performs encryption. The technique targets network devices; it does not describe SMB/TLS protocol discovery, LSASS credential dumping, or Kerberos ticket requests.