Microsoft Visual Studio Code is a Microsoft licensed distribution of Code - OSS. Therefore installing and registering an arbitrary password filter could be used to harvest credentials every time a user changes his password. These extensions may be collecting their own usage data and are not. This is because a password filter in order to perform the password validation requires from the Local Security Authority (LSA) the password of the user in plain-text. Password filters assist administrators to prevent these type of passwords in order users to choose more unique passwords.ĭuring red team assessments password filters can be used as method to retrieve credentials from domain users (domain controller) or local accounts (local computer). The notification package answers back whether or not the password is. For example a password with 8 characters length might be acceptable by the group policy however if it is in the form of $companyname123 or Spring2020 is considered weak since these passwords could be used by an attacker during a brute force attack. Notification packages are DLLs that Windows calls into whenenever a user changes. Filters are used to validate new passwords and to ensure that these are aligned with the password policy in place and no passwords are used that might be compliant with the domain policy but considered weak. Microsoft has introduced password filters as a method for systems administrators to enforce password policies and change notification.

Notification dll not registered