CmdID

CmdID / Commands

mimikatz-crypto

Manipulate Windows cryptographic services and certificates, allowing you to list and export certificates and keys, even those marked as non-exportable. tldr-pages

On Windows

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from tldr-pages, CC BY 4.0

Manipulate Windows cryptographic services and certificates, allowing you to list and export certificates and keys, even those marked as non-exportable. It generally requires elevated privileges, especially when accessing system keys.

List cryptographic providers

mimikatz "crypto::providers"Identify

Trips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton

List keys in a cryptographic provider

mimikatz "crypto::capi"Identify

Trips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton

Export certificates and keys

mimikatz "crypto::certificates /export"Identify

Trips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton