hard20 pts · first answer countsidentity-securityactive-directorycredential-theft
Passwords found in SYSVOL XML
A penetration tester finds a Groups.xml file in SYSVOL from 2011 with a cpassword attribute for a local admin account. Why is this serious even though the value is encrypted?
Discussion 0
Join free to post in the discussion.
Related questions
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- A user added to Domain AdminsCybersecurity Analyst
- Authentication or authorization?Cybersecurity Analyst
- What a Kerberos TGT is forCybersecurity Analyst
- Where the Kerberos KDC runsCybersecurity Analyst
- Windows event for a failed logonCybersecurity Analyst