https://www.lifars.com/knowledge-center/mitigating-credential-dumping-on-windows-clients/