Gartner's ransomware playbook lists three credential reset steps — all human, all Active Directory. Machine identities, which outnumber human ones 82 to 1, aren't mentioned.