It’s been a while, but my last few posts have been on password spraying, which is great approach if your customer has an userid / password interface that faces the internet. I also ran a walk-through on using responder and LLMNR.
Article Link: https://isc.sans.edu/diary/rss/24062