Unknown Process Using The Kerberos Protocol
Use Alternate Authentication Material
Use Alternate Authentication Material
OS Credential Dumping, DCSync, Rogue Domain Controller
Obfuscated Files or Information
Disable or Modify Tools, Impair Defenses