TL;DR: Registry-backed secrets readable as SYSTEM — service account creds and cached domain logins.

Stub — to be filled in.

What it is

TODO

Preconditions / where it applies

TODO

Technique

TODO

Detection and defence

TODO

References

• https://book.hacktricks.wiki/en/windows-hardening/stealing-credentials/credentials-protections.html