Domain Credential detection is the User Credential Detection method that checks for the submission of a valid corporate username and the associated password within a URL Filtering Security profile. This method requires the Windows User-ID agent and the User-ID credential service to be installed on a read-only domain controller (RODC). The firewall can then detect passwords submitted to web pages and compare them with the domain credentials stored on the RODC. If the firewall detects a match, it can block the request, alert the user, or generate a log entry1. References: Configure Credential Detection with the Windows User-ID Agent, Set Up Credential Phishing Prevention, Certifications - Palo Alto Networks, Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0) or [Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0)].