Credential Protection
Cached logons, WDigest and credential exposure settings
Cut the credentials Windows keeps on disk and in memory: cached logon count, WDigest, cleanup after logoff, stored network passwords and Credential Manager.
Foundation
Guides tagged
#credential-theft
Credential Protection
RDP without exposing credentials: RCG and Restricted Admin
Stop RDP leaving reusable credentials on servers: Remote Credential Guard, Restricted Admin mode, DisableRestrictedAdmin and credential delegation policy.
Intermediate
Credential Protection
Credential Guard and LSA protection: protect LSASS
How Credential Guard and LSA protection (RunAsPPL) stop credential dumping, how to enable and verify them, what they break, and the legacy settings to turn off alongside.
Intermediate