### Overview
Following the alert of initial access through compromised MSP credentials, further analysis reveals that APT10 leveraged a combination of social engineering and spear-phishing attacks to acquire the necessary credentials. 

### Detailed Findings
- **Phishing Campaign**: Targeted emails were sent to MSP employees, masquerading as official communications.
- **Credential Harvesting**: APT10 used fake login portals to capture login details.

### Next Steps
Focus shifts to potential execution methods, with particular attention to DLL side-loading techniques known to be favored by APT10.