Relay attack

You must manually lock down Active Directory certificate services, turn on extended protection for authentication, especially if your servers are running 2019 or 2022.

And when you see advanced relay attacks like ESC8, do not hesitate to enforce total workstation isolation.

Second, you really need to recognize the vulnerability in autonomous agents.

The new wave of open source frameworks like Artex trade stealth for velocity.