Resetting a password doesn't always remove attackers from Active Directory. Specops Software explains how cached credentials and Kerberos tickets can keep attackers authenticated after a reset. [...]
Why Changing Passwords Doesn’t End an Active Directory Breach
Summary + source link. No paywalls, no tracking.