Pass the Hash to Windows Hosts over SMB

On an already-compromised Windows host with authorized elevated access, inspect LSASS logon sessions for account material, then use an NTLM hash to enumerate SMB shares and run a remote command on a reachable Windows target. This workflow describes Windows credential access and lateral movement; it does not itself use an Okta API access token, access an Okta organization, or establish that a selected host is connected to Okta.