Use of Valid Accounts / Assume Breached

Valid Accounts describes the use of credentials for legitimate accounts to access systems or services and may support initial access, persistence, privilege escalation, defense evasion, or lateral movement. This record demonstrates an SMB lateral-movement scenario: an already available account password is used to enumerate accessible shares and, where the account has sufficient rights, execute a remote command. These steps do not acquire credentials or establish persistence by themselves.