Can I read Credential Dumping in Windows Security on EtoBox?

Credential Dumping in Windows Security by Jacobo Perez Laverde is a document available to read on EtoBox.

What is Credential Dumping in Windows Security about?

Credentials such as hashes, tokens, cached credentials, LSA secrets, and Kerberos tickets stored in Windows systems can be leveraged by attackers to move laterally across the network. Various tools like Mimikatz, fgdump, and creddump allow dumping these credentials from compromised systems with administrator privileges. Stolen credentials can then be used to authenticate as other users and escalate access. Defenses include preventing admin access, using credential guard, and reducing exposed credential type

Author

Jacobo Perez Laverde

Language

EN