Adversaries may gather credential material by evoking an authentication process that provides the material.
The MITRE Corporation. (2024). MITRE ATT&CK Enterprise Matrix. https://attack.mitre.org/matrices/enterprise/