PyWhisker is a Python CLI for inspecting and modifying the Active Directory msDS-KeyCredentialLink attribute in Shadow Credentials (Key Trust) operations. It can list, add or spray, inspect, remove, clear, export, and import KeyCredential values for user and computer accounts. Adding a value generates a certificate-backed key credential and saves certificate/private-key material; using it for PKINIT authentication or later ticket/hash recovery requires separate tooling and the relevant domain-controller prerequisites.
Python
RESTRICTED_ACCESS_BLUR_MARKER