How NCSC guidance can help organisations detect and protect themselves from credential abuse.