โฑ๏ธ 60-Second Bits ๐
๐๐ผ ๐๐ผ๐ ๐ฅ๐๐ฃ ๐๐ผ ๐๐ผ๐๐ฟ ๐๐ผ๐บ๐ฎ๐ถ๐ป ๐๐ผ๐ป๐๐ฟ๐ผ๐น๐น๐ฒ๐ฟ๐ ๐ณ๐ฟ๐ผ๐บ ๐๐ผ๐๐ฟ ๐๐ผ๐ฟ๐ธ๐๐๐ฎ๐๐ถ๐ผ๐ป?
Even with ๐๐ฟ๐ฒ๐ฑ๐ฒ๐ป๐๐ถ๐ฎ๐น ๐๐๐ฎ๐ฟ๐ฑ enabled, your ๐๐ผ๐บ๐ฎ๐ถ๐ป ๐๐ฑ๐บ๐ถ๐ป ๐ฐ๐ฟ๐ฒ๐ฑ๐ฒ๐ป๐๐ถ๐ฎ๐น๐ can still end up in the ๐ ๐ฆ๐ง๐ฆ๐ process memory on your workstation.
Credential Guard protects ๐๐ฆ๐๐ฆ๐ฆ.
It does ๐ป๐ผ๐ protect credentials handled by the ๐ฅ๐๐ฃ client.
If your workstation is compromised, an attacker may be able to recover those credentials from ๐บ๐๐๐๐ฐ.๐ฒ๐ ๐ฒ.
The solution isnโt another Windows security feature.
Itโs proper privileged administration:
โ ๐ฃ๐ฟ๐ถ๐๐ถ๐น๐ฒ๐ด๐ฒ๐ฑ ๐๐ฐ๐ฐ๐ฒ๐๐ ๐ช๐ผ๐ฟ๐ธ๐๐๐ฎ๐๐ถ๐ผ๐ป (๐ฃ๐๐ช)
โ A properly implemented ๐ง๐ถ๐ฒ๐ฟ๐ถ๐ป๐ด ๐ ๐ผ๐ฑ๐ฒ๐น
Credential Guard is important.
It just doesnโt solve this problem.
