Kerberos Golden Ticket Protection Mitigating Pass-The-Ticket on Active Directory [pdf]cert.europa.eu1 pointbased210 years ago