Use of Blank-Password Local Accounts

Use a known local user account with a blank password only where the target permits the relevant logon. MITRE ATT&CK T1078.003 covers abuse of local accounts across several tactics; this entry is limited to one authorized SMB validation against a pre-created test account. On Windows, the effective blank-password policy commonly blocks remote network logons for local accounts. Account listings and logon events do not establish that an account's current password is blank.