GhostPack-SharpDPAPI/SharpDPAPI/Commands/MachineCertificates.cs

using System;
using System.Collections.Generic;
using System.IO;

namespace SharpDPAPI.Commands
{
    public class MachineCertificates : ICommand
    {
        public static string CommandName => "machinecerts";

        public void Execute(Dictionary<string, string> arguments)
        {
            Console.WriteLine("\r\n[*] Action: Machine DPAPI Certificate Triage\r\n");

            if (!Helpers.IsHighIntegrity())
            {
                Console.WriteLine("[X] Must be elevated to triage SYSTEM DPAPI Credentials!");
            }
            else
            {
                Dictionary<string, string> mappings = Triage.TriageSystemMasterKeys();

                Console.WriteLine("\r\n[*] SYSTEM master key cache:\r\n");
                foreach (KeyValuePair<string, string> kvp in mappings)
                {
                    Console.WriteLine("{0}:{1}", kvp.Key, kvp.Value);
                }
                Console.WriteLine();

                Triage.TriageSystemCerts(mappings);
            }
        }
    }
}