• Mimikatz tool
  • Dump Hashes
  • DCSync Attack
  • reset the account to the previous password after finishing assessment if we have the NTLM of the old pass