Readable shares are where credentials and data leak at scale. Two veins are most productive: credentials scattered through scripts, configuration files, and SYSVOL Group Policy Preferences, and the bulk artifacts, backups, disk images, and password databases, that teams leave on shares and that contain everything at once.
Subtopics#
- Credential hunting: passwords in scripts, configs, and SYSVOL.
- Backups and archives: backups, images, and password databases.