Active_Directory_Identity_Defense / Kerberoasting_Detection_And_Remediation · size 20 · threshold 4 · max attempts 3