{"podcast":{"title":"CyberCode Academy","slug":"cybercode-academy-7578615","podcast_index_feed_id":7578615,"rss_url":"https://www.spreaker.com/show/6790974/episodes/feed","website_url":"https://www.spreaker.com/podcast/cybercode-academy--6790974","image_url":"https://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/5f51ccc7b22fdba95149ffa6346f1533.jpg","author":"CyberCode Academy","episode_count":297,"summary":"Welcome to CyberCode Academy — your audio classroom for Programming and Cybersecurity. 🎧 Each course is divided into a series of short, focused episodes that take you from beginner to advanced level — one lesson at a time. From Python and web development to ethical hacking and digital defense, our content transforms complex concepts into simple, engaging audio learning. Study anywhere, anytime — and level up your skills with CyberCode Academy. 🚀 Learn. Code. Secure. You can listen and download our episodes for free on more than 10 different platforms: https://linktr.ee/cybercode_academy","last_synced_at":"2026-07-13T14:17:20.596630+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615"},"episode":{"title":"Course 36 - Windows Forensics and Tools | Episode 5: Structure and Forensic Significance","slug":"course-36-windows-forensics-and-tools-episode-5-structure-and-forensic-significance","published_at":"2026-06-03T06:00:02+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-36-windows-forensics-and-tools-episode-5-structure-and-forensic-significance","show_page_url":"https://stenobird.com/podcast/cybercode-academy-7578615","url":"https://www.spreaker.com/episode/course-36-windows-forensics-and-tools-episode-5-structure-and-forensic-significance--72013638","audio_url":"https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/72013638/windows_sids_are_permanent_digital_fingerprints.mp3","summary":"In this lesson, you’ll learn about: Windows Security Identifiers (SIDs) and user tracking1. What is a Security Identifier (SID)? A SID (Security Identifier) is a unique value assigned to every: User Group Security principal (system accounts, services) 🔹 Core Idea It acts like a permanent digital fingerprint in Windows Used internally instead of usernames 👉 Key Property: A SID is never reused, even if the account is deleted 2. Why SIDs Exist Windows needs a stable way to identify identities Usernames can change SIDs cannot 🔹 Example Use Permissions are assigned to SIDs, not names Access control checks rely on SID matching 3. SID in Access Tokens🔹 What happens at login? Windows creates an access token This token contains: User SID Group SIDs Privileges 👉 Key Insight: Every process inherits this token This determines what the user can do 4. Structure of a SIDA SID is not random—it has a strict format:🔹 Main Components Identifier Authority Sub-authority values Relative Identifier (RID) 5. SID Breakdown Explained🔹 Identifier Authority Defines the system or domain origin Example: Local machine Domain controller 🔹 Sub-authorities Represent hierarchical security structure Provide organizational uniqueness 🔹 Relative Identifier (RID) The most specific part Identifies the actual account 6. Important RID Examples🔹 Common Built-in Accounts 500 → Built-in Administrator 501 → Guest account 512 → Domain Admins group 513 → Domain Users group 🔹 Special Group “Everyone” group → universal access SID 👉 Key Insight: RID tells you exactly what type of account it is 7. How SIDs Are Used in Security🔹 Access Control File permissions are assigned to SIDs Not usernames 🔹 Authentication Flow Login → SID loaded → permissions applied 8. Forensic Importance of SIDs🔹 What investigators can learn Whic…","meta_description":"In this lesson, you’ll learn about: Windows Security Identifiers (SIDs) and user tracking1. What is a Security Identifier (SID)? A SID (Security Identifie…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1268,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-36-windows-forensics-and-tools-episode-5-structure-and-forensic-significance/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-36-windows-forensics-and-tools-episode-5-structure-and-forensic-significance.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}