Get WMIObject Group Discovery with Script Block Logging
Permission Groups Discovery, Local Groups
Permission Groups Discovery, Local Groups
Steal or Forge Kerberos Tickets, AS-REP Roasting
Account Discovery, Local Account, PowerShell
Password Policy Discovery
File and Directory Permissions Modification