Cross-domain Kerberoasting

Cross-domain Kerberoasting uses credentials accepted by an Active Directory trust to request service tickets for SPN-bearing accounts in the target domain and assess the returned TGS material offline. The password, NT-hash, and ccache examples are alternative authentication methods, not sequential steps. The source also includes a distinct AS-REP-roasting path for target-domain accounts without Kerberos pre-authentication; that path does not require credentials accepted across the trust and maps to ATT&CK T1558.004. The current technique ID T1558.003 applies to the Kerberoasting path.