Linux Credential Hunting

Post-foothold review of a Linux host for candidate credential material, including Kerberos caches and keytabs, plaintext application/configuration secrets, shell history, and SSH private-key files. A path or string match alone does not establish readability, valid credential contents, principal scope, or current usability. Sudo/cron enumeration and packaging or transferring collected material are distinct follow-on procedures, not credential hunting itself.