Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

bootkey

sekurlsa::bootkey sets the SecureKernel Boot Key and attempts to decrypt LSA Isolated credentials. It has the following command line arguments:

  • /new: the new Boot key value

  • /raw: RAW memory search for candidate keys in cache

  • /flush: it flushes cache

mimikatz # sekurlsa::bootkey

Candidate keys in cache:

Current IumMkPerBoot: <none>
Previousbackupkeys
Nextcloudap

Last updated