Credential Dumping
MITRE ATT&CK, Credential Access, ID TA0006
Cached Domain CredentialsData Protection API (DPAPI)Group Policy PreferencesLSA SecretsLSASS MemoryNTDSSecurity Account Manager (SAM)Kerberos TicketsUnsecured CredentialsWDigestWiFi Profiles
Last updated