Comment by dark_silicon

Is there any sort of metaheuristic a good password cracker can follow for juggling between rounds of dictionary iteration, character substitution, brute force suffixing, etc?

In other words, how do you most effectively combine different strategies?