2024-01-02: Site is back on track, self-hosted on a rpi because you get the Internet you fund.
2025-02-06: Oh well, some power grid issues caused the rpi to reboot, I really should configure uwsgi to restart automatically --'

12345778-1234-abcd-ef00-0123456789ac
LSASS Protected Storage

12345778-1234-abcd-ef00-0123456789ac LSASS Protected Storage dcerpc

Seen in MS-{SAMR}

Counts : MS-SAMR:2
-1 MS specs regex push
lsass.exe samr interface

Probably MSRPC
from NMAP nselib/msrpc.lua
0 autopush - nmap_nse_msrpc
"\\samr" ; v= 0x01

Probably MSRPC
from NMAP nselib/msrpc.lua
0 autopush - nmap_nse_msrpc
DCERPCsvc:samsrv.dll:+0100

from https://github.com/CoreSecurity/impacket
0 autopush - impacket-dcerpc-v5-epm-knownuuid
wireshark/epan/dissectors/pidl/samr/samr.idl:11

[ uuid("12345778-1234-abcd-ef00-0123456789ac"),
in ../wireshark/epan/dissectors/pidl/samr/samr.idl:11
-2
wireshark/tools/pidl/tests/util.pl:41

print_uuid("12345778-1234-abcd-ef00-0123456789ac"));
in ../wireshark/tools/pidl/tests/util.pl:41
-2
wireshark/tools/pidl/tests/util.pl:43

print_uuid("\"12345778-1234-abcd-ef00-0123456789ac\""));
in ../wireshark/tools/pidl/tests/util.pl:43
-2
wireshark/doc/wireshark.pod.template:717

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0>> will collect data for the CIFS SAMR Interface.
in ../wireshark/doc/wireshark.pod.template:717
-2
wireshark/doc/wireshark.pod.template:724

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0,ip.addr==1.2.3.4>> will collect SAMR
in ../wireshark/doc/wireshark.pod.template:724
-2
wireshark/doc/tshark.pod:1077

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0>> will collect data for the CIFS SAMR Interface.
in ../wireshark/doc/tshark.pod:1077
-2
wireshark/doc/tshark.pod:1084

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0,ip.addr==1.2.3.4>> will collect SAMR
in ../wireshark/doc/tshark.pod:1084
-2
wireshark/epan/dissectors/pidl/samr/samr.idl:11

[ uuid("12345778-1234-abcd-ef00-0123456789ac"),
in wireshark/epan/dissectors/pidl/samr/samr.idl:11
-2 wireshark
wireshark/doc/tshark.pod:1082

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0>> will collect data for the CIFS SAMR Interface.
in wireshark/doc/tshark.pod:1082
-2 wireshark
wireshark/doc/tshark.pod:1089

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0,ip.addr==1.2.3.4>> will collect SAMR
in wireshark/doc/tshark.pod:1089
-2 wireshark
wireshark/doc/wireshark.pod.template:717

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0>> will collect data for the CIFS SAMR Interface.
in wireshark/doc/wireshark.pod.template:717
-2 wireshark
wireshark/doc/wireshark.pod.template:724

Example: S<B<-z dcerpc,srt,12345778-1234-abcd-ef00-0123456789ac,1.0,ip.addr==1.2.3.4>> will collect SAMR
in wireshark/doc/wireshark.pod.template:724
-2 wireshark
wireshark/tools/pidl/tests/util.pl:41

print_uuid("12345778-1234-abcd-ef00-0123456789ac"));
in wireshark/tools/pidl/tests/util.pl:41
-2 wireshark
wireshark/tools/pidl/tests/util.pl:43

print_uuid("\"12345778-1234-abcd-ef00-0123456789ac\""));
in wireshark/tools/pidl/tests/util.pl:43
-2 wireshark
reactos/sdk/include/reactos/idl/sam.idl:818

uuid(12345778-1234-ABCD-EF00-0123456789AC),
in reactos/sdk/include/reactos/idl/sam.idl:818
-2 reactos
LSASS Protected Storage

from https://www.msxfaq.de/windows/rpc.htm
1 autopush - msxfaq.de