Cyberattackers breach endpoints to gain access to human and machine identities for admin rights to create new accounts and logins.