Security

Password Spraying

A brute-force variant that tries one or a few common passwords against many accounts, rather than many passwords against one, to stay under per-account lockout thresholds.

Deep dive

Learn Article

How to Spot DCSync and Mailbox Harvesting After a Web Server Is Breached

Credential replication and bulk email collection both abuse legitimate protocols, so detection means baselining normal activity and alerting on the exceptions.

intermediate 5 min read

Back to glossary