Time to stop lurking and post links to some of my favorite articles on Active Directory and it's various security concepts. Hope everyone enjoys the authors works as much as I do.

Kerberos
https://en.hackndo.com/kerberos/
Service Principal Names
https://en.hackndo.com/service-principal-name-spn/
Pass-the-Hash
https://en.hackndo.com/pass-the-hash/
Delegation
https://www.tarlogic.com/en/blog/ker...legation-work/