Kerberosity Killed the Domain: An Offensive Kerberos Overview

posts.specterops.io

Kerberos is the preferred way of authentication in a Windows domain, with NTLM being the alternative.