( NOTE : ABOVE ADVANTAGE IS WE CAN DISPLAY ONLY WHAT WE NEED THAT THINGS ONLY WE CAN ADD TO QUERY BUT ALL THE INNER QUERIES ARE EXECUTED BUT WE CAN RESTRICT WHAT DISPLAY IN OUTER SUBQUERY) ...
# Attack path: Attacker obtains KRBTGT NTLM hash (via DCSync, # "Audit Kerberos Authentication Service" → Enable SUCCESS and FAILURE # "Audit Kerberos Service Ticket Operations" → Enable SUCCESS and ...