NTLM AUTHENTICATION:

KERBEROS:

Cached AD Credentials:

• .\Mimikatz.exe

CHECK mimikatz section of password atttacks

CA certificates - Mimikatz;

crypto::capital, crypto::cng

PERFORMING ATTACKS ON AD:

Password Attacks