Listing on-prem AD vectors to protect with MFA

What are all the vectors that someone can attack on a Windows Domain that if you can, you should secure with MFA? Here is a list I have but if I could have help adding to it. I have a couple of stipulations hopefully most will follow:
1. I don’t want software recommendations, including but not limited comments like “just use X and you’ll be good” as it isn’t actually helpful to anyone.
2. If you come up with a …

attack comments cybersecurity domain don isn list listing mfa on-prem protect recommendations software windows