Pass-the-hash (PTH)

WSUS abuse

psexec

wmiexec

Double Hop

DCOM

5985 - WinRM