Pass-the-Hash 1 Active Directory Hardening 2024: Defending Against Kerberoasting, PtH, and Identity Attacks Mar 31, 2026