-CNG certificate private key support
-/nowrap added to `backupkey`
-key component error fix
-combined `machinecerts` to `certificates /machine`
-fixed SHA1 "hash" calculation for entropy
-only decrypted certs now display by default, `/showall` will show all
-User certificate extraction corrected
-Added more certificate information on extraction (including Enhanced Key Usages)
-Fixed a few formatting issues
-Added /target option for machinecertificates command
-Landed @leftp's PR for user and machine certificate private key extraction
-Added cert triage to the "triage" and "machinetriage" commands
-Using /password:X now causes the DPAPI masterkey cache to be output
-Added *ps* command to decrypt exported PSCredential .xmls (thanks for the idea @gentilkiwi ;)
-Added README section for the *blob* command
-Misc. small output tweaks
-Added **blob** function to describe a raw DPAPI blob
-Added **rdg** function to triage RDCMan.settings/.RDG files and decrypt any saved RDP passwords
-Added IsTextUnicode() for vault/credential/blob decryption display, showing hex if unicode is detected
-Added /target:C:\FOLDER\ option for the **masterkeys** function, for offline masterkey decryption
-Updated README
-Added remote server support for user triage functions
-Added machine triage (machinemasterkeys, machinecredentials, machinevaults, machinetriage)
-Expanded Vault credential format to handle vault credential clear attributes
-Expanded machine vault/credential search locations
-Broke out commands/files into the same general structure as Rubeus
P.S. this release was a huge PITA, hopefully it's appreciated ;)
Much <3 to @gentilkiwi for his excellent examples, and @tifkin_ for inspiring this work!
Kiblyn11