Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Tactics TA0001 TA0003 TA0004 TA0005 Sub-technique of T1078 See: MITRE ATT&CK