Ctrlk
Personal BlogTwitterGitHubContact
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Credential Dumping

MITRE ATT&CK, Credential Access, ID TA0006

Cached Domain CredentialsData Protection API (DPAPI)Group Policy PreferencesLSA SecretsLSASS MemoryNTDSSecurity Account Manager (SAM)Kerberos TicketsUnsecured CredentialsWDigestWiFi Profiles
PreviousCoercing Authentication
NextCached Domain Credentials

Last updated