• Security Accounts Manager (SAM) Database
  • manages users and their respective passes on windows
  • each stores password is hashed which LSA uses to verify auth
  • SAM file is stored in registry at HKEY_LOCAL_MACHINE\SAM