Seven Windows authentication paths bypass MFA protections, enabling credential attacks through AD, NTLM, Kerberos, RDP, SMB, and service accounts.
Two-factor authentication is the best protection against any of those, plus so much more. I'll explain what it is and why you should enable it whenever possible. Sometimes called 2-factor ...