mimikatz sekurlsa::tickets

mimikatz # sekurlsa::tickets /export

Export Kerberos tickets (TGT/TGS) from the current session to .kirbi files for reuse (pass-the-ticket).

When you need tickets from a privileged session without knowing the password. Ideal on hosts with domain admin sessions: export their TGT and reinject it with kerberos::ptt to access any resource with their identity.

If tickets have already expired or the target uses Credential Guard (tickets are in protected LSAIso). Also not if you only need the NTLM hash: logonpasswords is more direct.