Forum Discussion

jestump's avatar
jestump
Copper Contributor
Nov 11, 2022

runas elevated account cred hunting

Say I am on a windows device, logged in with my normal creds, lets say I did a runas with a separate elevated account to launch a tool like ADUC to do work, is there a tool like defender or powershell script that we can run against my machine or remote machine to see what creds the runas was started with?

 

No RepliesBe the first to reply