SANS Workshop – NTLM Relaying 101: How Internal Pentesters Compromise Domains