Proof of Concepts Pass-the-Ticket Invoke-Mimikatz (over PS Remoting) Windows Event Forwarder Creating Subscriptions Creating Custom Logs