dpapi vpol command

What it does

Decrypts a VPOL file using the (already decrypted) masterkey file.

Remarks

The VPOL file will not store secrets but decryption keys (usually two) for the matching VCRED file.
Decrypting the VCRED file is a separate command.

Requirements

• Decrypted Mastekey file (I hope you haven't forgot to use -o)
• The VPOL file

Subcommands

None

Switches

None

Examples

• pypykatz dpapi vpol mkf.json VPOL: Decrypts the VPOL file.