Skip to content
›_Secrets Dump

Posts tagged: #lsa

← Back to all posts
LSA secrets and cached domain credentials (DCC2), explained
The SECURITY hive holds service passwords, the machine account, DPAPI keys and logon caches. See how the LSA key unlocks them — and why DCC2 is salted but still crackable.
windowscredentialslsadcc2