Authenticate with Local Credentials

Adversaries may use credentials for an existing local account to authenticate to the system or service on which that account is defined. This can support initial access, persistence, privilege escalation, or defense evasion. This procedure covers use of valid local account credentials; account discovery, credential acquisition, and authentication with stolen password hashes are separate procedures.