Credential Dumping
Credential dumping is the process of extracting authentication material (passwords, hashes, tokens, keys) from a compromised system for reuse or offline cracking. Common targets include OS credentials (LSASS, SAM), browsers, and application-specific stores.