Where Multi-Factor Authentication Stops and Credential Abuse Starts
Seven Windows authentication paths bypass MFA protections, enabling credential attacks through AD, NTLM, Kerberos, RDP, SMB, and service accounts.
More info