Type Credential History

From truxwiki.com
Revision as of 14:14, 15 April 2025 by Sam (talk | contribs) (→‎Filenames seen)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
<< Details >>
Defined Constant Type_Credential_History
File Type Value 548
Parent Type None
Carve Yes
Format Details Yes
MIME Type application/octet-stream
Filename Extension bin

CREDHIST

Description

Windows DPAPI Credential History

Truxton Exploiters

This file type is handled by the following ETLs:

Items Produced

Truxton will extract the following from this file type:

Filenames Seen

  • CREDHIST

Details