Glossary: Application and Credential Attacks, and AI Risks

pass-the-hash

Also written: PtH

A credential replay where the attacker steals a Windows password hash from memory and uses it to sign in through NTLM, as if it were the password. The first try works, so no lockout fires.