Compromised Active Directory credentials allow attackers to log in without exploits, driving modern authentication-based initial access.