T1552.002
Unsecured Credentials: Credentials in Registry
Unsecured Credentials: Credentials in Registry
Unsecured Credentials: Credentials In Files
Use Alternate Authentication Material: Pass the Ticket
Use Alternate Authentication Material: Pass the Hash
Abuse Elevation Control Mechanism: Sudo and Sudo Caching