Brute Force: Password Cracking

Threat Actors may use password cracking to attempt to recover usable credentials, such as plaintext passwords, when credential material such as password hashes are obtained. OS Credential Dumping can be used to obtain password hashes, this may only get Threat Actors so far when Pass the Hash is not an option. Further, Threat Actors may leverage Data from Configuration Repository in order to obtain hashed credentials for network devices.