Active Directory 1 KRBTGT: Architecture, Trusts, PAC, and the Evolution of Ticket Attacks Dec 29, 2025