Merge PR #5512 from @GrepItAll - fix: use the correct PreAuthType selection field name

fix: Potential AS-REP Roasting via Kerberos TGT Requests - use the correct PreAuthType selection field name

---------

Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>

Author: GrepItAll

rules/windows/builtin/security/win_security_kerberos_asrep_roasting.yml

@@ -9,6 +9,7 @@ references:
     - https://www.picussecurity.com/resource/blog/as-rep-roasting-attack-explained-mitre-attack-t1558.004
 author: ANosir
 date: 2025-05-22
+modified: 2025-07-04
 logsource:
     product: windows
     service: security
@@ -17,7 +18,7 @@ detection:
         EventID: 4768
         TicketEncryptionType: '0x17'
         ServiceName: 'krbtgt'
-        Pre-AuthenticationType: 0
+        PreAuthType: 0
     condition: selection
 falsepositives:
     - Legacy systems or applications that legitimately use RC4 encryption