Windows Credential Manager

GPTKB entity

Statements (51)
Predicate Object
gptkbp:instanceOf gptkb:password
gptkbp:accessibleBy gptkb:Control_Panel
gptkb:Windows_Settings
cmdkey.exe
malware (if system is compromised)
rundll32.exe
gptkbp:canBeManagedBy gptkb:PowerShell
gptkb:Windows_API
Credential Manager UI
cmdkey command
gptkbp:canImport gptkb:administrator
gptkb:digital_media
gptkbp:category gptkb:Windows_security_feature
password management
Windows authentication
gptkbp:credentialsStoredIn Credential Locker
Windows Vault
%Systemdrive%\Users\<username>\AppData\Roaming\Microsoft\Credentials
%Systemdrive%\Users\<username>\AppData\Local\Microsoft\Credentials
gptkbp:developedBy gptkb:Microsoft
gptkbp:documentation https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-manager
gptkbp:encryptsDataWith gptkb:Windows_Data_Protection_API
gptkbp:exportedTo gptkb:administrator
gptkb:digital_media
gptkbp:introducedIn gptkb:Windows_XP
gptkbp:location Control Panel > User Accounts > Credential Manager
gptkbp:numberOfLocations user credentials
Windows authentication credentials
certificate-based credentials
generic credentials
web passwords
gptkbp:partOf gptkb:Microsoft_Windows
gptkbp:removes gptkb:administrator
gptkb:digital_media
gptkbp:securityRiskIf compromised
gptkbp:storesCredentialsFor gptkb:Windows_credentials
network shares
generic credentials
mapped drives
web credentials
gptkbp:supports automatic logon
credential backup
credential restore
gptkbp:usedBy gptkb:Remote_Desktop_Connection
web browsers
Windows applications
Windows services
gptkbp:bfsParent gptkb:Windows_Data_Protection_API
gptkb:Windows_Credential_Locker
gptkbp:bfsLayer 8
https://www.w3.org/2000/01/rdf-schema#label Windows Credential Manager