Identity-based attacks represent the most frequent vector for attackers to breach companies. This presentation is a comprehensive taxonomy of attacker tactics, techniques, and procedures (TTPs) specifically related to identity breaches. Through detailed analysis, we categorize and explore prevalent attack vectors and methods of exploitation. Furthermore, we discuss practical and effective defense mechanisms aimed at mitigating these threats.