Understanding Password Spraying

Password spraying is the process of brute-force guessing passwords against a list of accounts, either externally or internally. Adversaries use this tactic to attempt to establish initial access within an organization and/or laterally move to alternate identities within a network.