Most ransomware playbooks don't address machine credentials. Attackers know it.