Blogpost: mimikatz: Golden Ticket + DCSync
Tools: oledump.py and xor-kpa.py
Tool: CreateCertGUI
Tool: rtfdump.py
Sample: 4483ad299158eb54f6ff58b5346a36ee
Sample: 07884483f95ae891845caf0d50ce507f
rtfdump.py