Stealthier than Golden Ticket (no DC interaction) - Harder to detect (no TGT request logged on DC) - Useful for targeting specific services