Windows and Linux Authentication Bypass with AIM
Channel: DFIRScience
Date: 2022-07-28

This video is not sponsored by Arsenal Recon. Arsenal Image Mounter 3.9 is out and has a lot of new features. You need to check out three features: Windows authentication bypass with Data Protection API (DPAPI) bypass, Linux authentication bypass, and Virtual DD. This video shows how to quickly and easily access a virtualized suspect disk!

Thank you to our Members and Patrons, but especially to TheRantingGeek, Roman, Alexis Brignoni, Lorie Hermesdorf, Steven Lorenz, and OkiePioneerWoman! Thank you so much!

00:00 Arsenal Image Mounter 3.9
00:08 Linux Authentication Bypass
01:53 Windows Authentication Bypass
03:51 Virtual DD

https://bit.ly/2Ij9Ojc - 👍 Subscribe for weekly videos

 ❤️ Get early access and bonus content - https://bit.ly/DFIRSciMember

Links:
* AIM 3.9 Release (https://arsenalrecon.com/insights/quick-tour-of-new-features-in-arsenal-image-mounter-v3-9-218)
* Arsenal Image Mounter Download (https://arsenalrecon.com/downloads)
* Install Hyper-V on Windows Home (https://gist.github.com/jijames/5db5f9b7cfb08a1a04048996846b1b50)
* Strings for Windows (https://docs.microsoft.com/en-us/sysinternals/downloads/strings)

Related book:
* Pro Microsoft Hyper-V 2019 (https://amzn.to/3S6w7gO)

#forensics #dfir #authentication #hacking 
010001000100011001010011011000110110100101100101011011100110001101100101 
Get more Digital Forensic Science
  👍 Subscribe → https://bit.ly/2Ij9Ojc
  ❤️ YT Member → https://bit.ly/DFIRSciMember
  ❤️ Patreon → https://www.patreon.com/dfirscience
  🚀 Forensic Courses → https://learn.dfir.science

🕸️ Blog → https://DFIR.Science
🤖 Code  → https://github.com/DFIRScience
🐦 Follow → https://www.twitter.com/DFIRScience
📰 DFIR Newsletter → https://bit.ly/DFIRNews
010100110111010101100010011100110110001101110010011010010110001001100101

Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.