C

credential-access

Per-target credential-dumping playbook: LSASS, SAM, NTDS, DPAPI, browser, WDigest. Tool x primitive x evasion x detection. Pairs with detection-defense-library.