Inconsistency in krbtgt password rotation check about pingcastle HOT 4 CLOSED

Is that ok ?

from pingcastle.

Change it to "The password of the krbtgt account should be changed twice regularly (between 40 days and one year or at each admin departure) using this script" for beta 2.
Better phrasing welcomed

from pingcastle.

How about:

The account password for the krbtgt account should be rotated twice yearly at a minimum. More frequent password rotations are recommended, with 40 days the current recommendation by ANSSI. Additional rotations based on external events, such as departure of an employee who had privileged network access, are also strongly recommended.

from pingcastle.

updated in beta 2

from pingcastle.