Windows 10 DPAPI Masterkey Extraction

Windows kernel debugging and DPAPI masterkey recovery (Apr 2019 – Dec 2019)

Research on Windows 10 Data Protection API (DPAPI), Suwon, Korea (Apr 2019 – Dec 2019).

  • Windows 10 kernel debugging.
  • Data Protection API (DPAPI) masterkey extraction from a victim’s files.