Initial Access

Password Spray is obviously just using known or guessed passwords against accounts.

Illicit Consent Grant abuses app permission requests to gain low or admin privileges. low privileges can be granted to give for all users, but without an account there is no sure way to know. This definitely