Since Windows 8, users are urged to enhance their Windows sign-on experience by adding Microsoft Account credentials to their local account. Microsoft Account (previously known as Windows Live ID) is a single sign-on solution provided by Microsoft that covers a wide range of services. This is one of those cases where a seemingly small change brings a plethora of new possibilities to digital forensics. What DOES change though is the types and amounts of information can be accessed with the Microsoft Account password we’ve just recovered. This isn’t exactly new, since the same thing could be done to local Windows accounts a decade ago. Running a GPU-assisted attack on the password (using Elcomsoft Distributed Password Recovery or similar tool) allows quickly enumerating the passwords with a combination of dictionary and brute-force attacks, in many cases resulting in the recovery of the original plain-text password. The point is that we have finally laid our hands on something that can help us break into a major online authentication service, the Microsoft Account.įor that to happen, Elcomsoft System Recovery can export the locally cached hash to the user’s Microsoft Account password for offline recovery. While the tool can reset Microsoft Account passwords to allow instant logins to otherwise locked accounts, this is not the point. Tap Microsoft account to view and edit the account settings.The recent update to one of our oldest tools, Elcomsoft System Recovery, brought long-overdue compatibility with Windows systems that sign in with online authentication via Microsoft Account. Note: For this tutorial, 'not now' was selected. Enter the verification code from the received email.Check the email account for the email containing the verification code, then tap the Code field.Note: For this demonstration, 'Email' was selected. Tap the How would you like to get this code? field.Tap the Return icon, then enter the required password.If you do not have an existing Microsoft/LiveID account, tap create one and follow the onscreen prompts. Note: For this demonstration, 'sign in' was selected. Note: An existing Microsoft account is required to complete this action. From the home screen, swipe down from the top of the screen to reveal the Action center.Note: See 'Factory Reset' for more information on resetting the device. The first Microsoft account associated with this device may have its settings edited, but a device reset is required to change the email address or delete it.
0 kommentar(er)
