Here's the scenario: all workstations are isolated from the internet. They can only get out to the web through a proxy server. This proxy server requires authentication and it manages credentials locally. Further, workstations are setup to prevent caching of proxy credentials.
In this video, we'll go through how to setup some of these restrictions and how to get past them with Cobalt Strike's Beacon.
http://www.advancedpentest.com/