Windows Domain Admin Impersonation Indicator
Steal or Forge Kerberos Tickets
Steal or Forge Kerberos Tickets
Modify Registry, OS Credential Dumping
Permission Groups Discovery, Domain Groups
Unsecured Credentials, Group Policy Preferences
Command and Scripting Interpreter, JavaScript