Security Accounts Manager

URI: https://gptkb.org/entity/Security_Accounts_Manager

GPTKB entity

Predicate	Object
gptkbp:instanceOf	Windows API
gptkbp:abbreviation	gptkb:SAM
gptkbp:accessibleBy	gptkb:Local_Security_Authority_Subsystem_Service lsass.exe SYSTEM account normal users booting from another OS
gptkbp:canBeBackedUpBy	gptkb:System_Restore
gptkbp:cannotBeAccessedWhen	Windows is running
gptkbp:category	authentication user management Windows security
gptkbp:developedBy	gptkb:Microsoft
gptkbp:fileLocation	%SystemRoot%\\system32\\config\\SAM
gptkbp:format	binary database
https://www.w3.org/2000/01/rdf-schema#label	Security Accounts Manager
gptkbp:numberOfLocations	security descriptors password hashes user account information
gptkbp:protectedBy	Windows security permissions
gptkbp:relatedTo	gptkb:Active_Directory gptkb:Windows_Registry gptkb:NTLM_authentication
gptkbp:usedIn	gptkb:Windows_8 gptkb:Windows_10 gptkb:Windows_11 gptkb:Windows_7 gptkb:Windows_NT gptkb:Windows_Vista gptkb:Windows_XP gptkb:Windows_2000 gptkb:Windows_Server_2003
gptkbp:vulnerableTo	pass-the-hash attacks password dumping attacks
gptkbp:bfsParent	gptkb:Local_Security_Policy gptkb:SAM_(Security_Accounts_Manager) gptkb:NT_family_of_Windows
gptkbp:bfsLayer	7