NATIVEBYPASSCREDGUARD

Summary from the TLDR InfoSec newsletter

NativeBypassCredGuard is a Red Team tool that bypasses Credential Guard by patching WDigest.dll using NTAPI functions. It can force plaintext credential storage in memory, making user credentials easily retrievable. The tool offers options to check current values or write new values, with the ability to remap the ntdll library for bypassing security mechanisms.