Glossary: Application and Credential Attacks, and AI Risks

user enumeration

Also written: username enumeration, enumeration

Finding out which usernames are valid because a system answers differently for real and fake ones, through different messages, reset replies or timing. Clues include "Invalid user" lines in Linux logs.