user

Contains information about the user credentials used by the threat actor.