Rubeus s4u2self

Rubeus.exe s4u /user:<computer>$ /rc4:<hash> /impersonateuser:administrator /msdsspn:cifs/<target>

Abuses constrained delegation to obtain a service ticket on behalf of another user (S4U2Self + S4U2Proxy).

When you have compromised a computer account with constrained delegation to a specific service (e.g., CIFS on a file server). Rubeus s4u allows obtaining a ticket for the service on behalf of a user (e.g., Administrator), granting access to that service.

If the target service does not have constrained delegation or the computer account lacks delegation privileges. Also if the EDR detects Rubeus.