Password spraying TL;DR: One password against many accounts to stay under lockout thresholds. AD, M365, OWA, VPN portals. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/password-spraying.html