1. As many organizations are using cloud-based email solutions such as Office 365 and Google Workspace for their employees, they are also synchronizing their Active Directory user database with the email services of their preferred cloud-based email provider. This means that an employee’s login username is the same as the username portion of their email address.
  2. When we get into any login page, there is a high chance that we can guess an username/email and later the page will give us a password incorrect error, through which we can identify that we are having a valid username which is can also be found in the target’s AD services.