Lateral Movement with PowerView
Find existing local admin access for the current user:
Find-LocalAdminAccess
Hunt for sessions of interesting users on machines where you have access:
Find-DomainUserLocation -CheckAccess | ?{$_.LocalAdmin -Eq True }
Search for kerberoastable...
blog.ad-attacks.com1 min read