Manage Windows Defender Credential Guard (Windows) - Windows security
Tags
attack-pattern: Control Panel - T1218.002 Credentials - T1589.001 Firmware - T1592.003 Hardware - T1592.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Hypervisor - T1062 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 92daf808-75d1-47d8-b61d-9d28ffeee020
Fingerprint d4dfeb3f5f2ef006
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 20, 2022, 5:12 p.m.
Added to db Sept. 26, 2022, 9:32 a.m.
Last updated Oct. 24, 2024, 11:52 p.m.
Headline Manage Windows Defender Credential Guard
Title Manage Windows Defender Credential Guard (Windows) - Windows security
Detected Hints/Tags/Attributes 36/1/10
Source URLs
Redirection Url
Details Source https://docs.microsoft.com/windows/access-protection/credential-guard/credential-guard-manage
URL Provider
Details Provider Source level domain
Details microsoft.com docs.microsoft.com
Attributes
Details Type #Events CTI Value
Details File 1 
dg_readiness_tool.ps1
Details File 8 
msinfo32.exe
Details File 1 
6.ps1
Details File 11 
lsaiso.exe
Details Windows Registry Key 1 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard
Details Windows Registry Key 7 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Details Windows Registry Key 1 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LsaCfgFlags
Details Windows Registry Key 1 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard\LsaCfgFlags
Details Windows Registry Key 1 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard\EnableVirtualizationBasedSecurity
Details Windows Registry Key 1 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard\RequirePlatformSecurityFeatures