Notifications
Clear all
Topic starter
11/06/2012 11:20 pm
Hello,
I am working a case that had a psuedo-domain created by an Actiontec Modem (I think).
I heard that the SECURITY hive caches domain passwords, so I put that in PRTK.
It only detected a DefaultPassword, which it cracked.
What is this? I thought the password for autologin was in the Software hive?
The Software hive contains DefaultUserName, but no DefaultPassword.
Can anyone shed some more light on this? Researching online (and testing against my machine) did not clear anything up.
