STAGE 1: VAULT ACCESS STAGE 2: BOOTKEY RECONSTRUCTION STAGE 3: PAYLOAD DECRYPTION SEBACKUPPRIVILEGE SECURITY HIVE SAM HIVE JD SKEW1 GBG DATA BOOTKEY USER_V CNG DECRYPTION SECRETS