Extract Secrets from Backups

Enumerate Active Directory domain user accounts and inspect logon-timestamp metadata to identify accounts with no recent recorded logon under an organization-defined threshold. This procedure returns account metadata; it does not extract secrets from backups or establish that inactive accounts are less monitored or weakly secured.