đī¸ Kerberos
5 items
đī¸ DPAPI
In a domain admin post-exploitation scenario, dump the domain backup key first and then decrypt all that you need by adding the option /pvk:key.pvk with SharpDPAPI.
đī¸ GPO
Force GPO update
đī¸ NTLM
SCF file
đī¸ Security Descriptors
WriteDACL
đī¸ MSSQL
Connection