Get ADUser with PowerShell Script Block
Domain Account, Account Discovery
Domain Account, Account Discovery
Modify Registry
LSASS Memory, OS Credential Dumping
Use Alternate Authentication Material, Pass the Ticket
Steal or Forge Kerberos Tickets, AS-REP Roasting