Why they used that (clever) sticky-keys trick instead of cracking password in the SAM database (the local admin password), sorry if my question is dumb.
They couldn't log in, because that VPN tunnel is only open before logging in. So they had to gain access while on the login screen.
They couldn't log in, because that VPN tunnel is only open before logging in. So they had to gain access while on the login screen.