Identify

AD Module in powershell

Get-ADUser -Filter {ServicePrincipalName -ne "$null"} -Properties ServicePrincipalName

Using Powerview

Get-DomainUser -SPN -Properties samaccountname,ServicePrincipalName

Kerberoast