Common technique and tools to hunt credentials on Windows or Active Directory
Group Policy Preferences
Powershell History
From Document Files
LaZagne / Mimikatz (elevated shell)
DPAPI Credential Dumping (NetExec, dploot)
Last updated 3 months ago