Adversaries may search for common password storage locations to obtain user credentials. Tactics TA0006 Sub-techniques T1555.001 T1555.002 T1555.003 T1555.004 T1555.005 T1555.006 See: MITRE ATT&CK