Kerberoasting is an attack against Kerberos environments in which an attacker requests service tickets and attempts to crack them offline to recover service-account credentials.
It is a practical Active Directory risk because weak service-account passwords can expose powerful access.