How I Set Up an Active Directory Lab, Performed a Kerberoasting Attack, and Then Locked It All Down

From zero AD knowledge to cracking a service account password in minutes — and then actually stopping it. A beginner’s honest walkthrough…