Remote Process Instantiation via WinRM and PowerShell Script Block
Remote Services, Windows Remote Management
Remote Services, Windows Remote Management
System Owner/User Discovery
Permission Groups Discovery, Local Groups
Steal or Forge Kerberos Tickets, AS-REP Roasting
Account Discovery, Local Account, PowerShell