Windows Red Team Credential Access Techniques - Mimikatz & WCE
Explore Windows Red Team credential access techniques and tools for dumping clear-text passwords and NTLM hashes from memory in this 42-minute video. Delve into the concept of Credential Access, which involves stealing account names and passwords through methods like keylogging and credential dumping. Learn about Mimikatz, a powerful post-exploitation tool for extracting passwords, hashes, PINs, and Kerberos tickets from memory. Discover additional attack techniques such as pass-the-hash, pass-the-ticket, and creating Golden Kerberos tickets. Access a detailed writeup and links to related resources, including the MITRE ATT&CK Framework and PowerShell Empire. Gain insights into advanced credential access methods used by adversaries to maintain access and evade detection in Windows environments.