Gather Victim Identity Information
Extracting usernames, emails and real names from metadata, websites and public documents.
How it shows up on Hack The Box
On HTB it is usually the author of a PDF or DOCX (exiftool) or the company's team page: that gives you the user list for AS-REP roasting or password spraying.
Techniques in our catalog that match this one (the number is their machines):
Machines to practice it
Sorted from easiest to hardest. The ▶ link takes you to the minute of the IppSec video where it is used.