Attacks are usually commenced by using tools such as BloodHound, which is an open-source application used for analyzing the security of AD domains and revealing the potential for escalating access entitlements. Once the cyberattackers have uncovered hidden or complex attack paths that can potentially compromise the security of the network, they then use tools like Mimikatz to steal the necessary credentials.