54,302 blogs · 4,481,250 posts Claim your blog

Record · corpus.blog/posts/01a08c63-3a3c-7371-bd50-29e4b2334c9a

Unpacking the AAD Broker LocalState Cache

winternl.com · published 30 September 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at winternl.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 6
Words captured: 6,705

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/jackullrich/BrokerDecrypt

github.com

https://web.archive.org/web/20240611124022/https://download.microsoft.com/download/8/6/B/86BAC59D-0DA3-4B9C-AF15-C077DC0D46CF/Windows%208.1%20Enterprise%20Device%20Management%20Protocol.pdf

web.archive.org

https://learn.microsoft.com/en-us/sysinternals/downloads/strings

learn.microsoft.com

https://habr.com/ru/articles/688426/

habr.com

https://github.com/bl4me/token/wiki/

github.com

Digging further into the Primary Refresh Token Read at the source ↗