SharpDPAPI

Looting Windows Secrets: Attacking DPAPI and Credential Manager

How attackers decrypt DPAPI-protected Credential Manager vaults and browser secrets, plus how blue teams detect and stop it.

Windows Privesc