Windows User Account Forensics

Walkthrough summary

Windows User Account Forensics TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• What type of accounts are used by the Windows operating system and various apps?
  Open the walkthrough page to inspect the full answer and command flow.
• What centrally manages local user accounts and domain accounts?
  Open the walkthrough page to inspect the full answer and command flow.
• How many users were found using the DSInternals command?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the value of the "bootKey" variable?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the SID of the domain user, m.ascot?
  Open the walkthrough page to inspect the full answer and command flow.