MITIGATIONS

1. Hard to detect because they are legit TGT tickets

2. Mimikatz generates a golden ticket with a life-span of 10 years

3. Set the attribute "Account is Sensitive and Cannot be Delegated" to prevent lateral movement with the generated ticket.