Secondary Categories: 02 - Cryptography 02 - Information Gathering Links: Dumping Credentials Credential Manager Scheduled Task Credentials Search Tag:📕

Data Protection API


Description:

This is a component built into Windows that provides a way for encrypting and decrypting data “blobs”. It uses cryptographic keys that are tied to either a specific user or computer and allows both native Windows functionality and third-party applications to protect/unprotect data transparently to the user.

DPAPI is used by the Windows Credential Manager to store and save credentials like RDP and Google Chrome to store website credentials.


Resources:

TitleURL
placeholder

Created Date: November 19th 2022 10:22
Last Modified Date: November 19th 2022 10:22