NT Winlogon

GPTKB entity

Statements (21)
Predicate Object
gptkbp:instanceOf Process
gptkbp:canBe malware attacks
gptkbp:canStart GINA (Graphical Identification and Authentication) modules
credential providers
gptkbp:category gptkb:software
Windows API
gptkbp:developedBy gptkb:Microsoft
gptkbp:executableName winlogon.exe
https://www.w3.org/2000/01/rdf-schema#label NT Winlogon
gptkbp:introducedIn gptkb:Windows_NT_3.1
gptkbp:location %SystemRoot%\\System32\\winlogon.exe
gptkbp:monitors keyboard and mouse activity
gptkbp:partOf gptkb:Microsoft_Windows_NT_family
gptkbp:responsibleFor handling user logon and logoff
loading user profile
locking and unlocking workstation
managing secure attention sequence (Ctrl+Alt+Del)
gptkbp:runsOn Process
Windows NT-based operating systems
gptkbp:bfsParent gptkb:Windows_NT_operating_system
gptkbp:bfsLayer 7