title: Hashed format in windows 7 or above
body: <p>I need to find some materials about how Security Accounts Manager(SAM) works in windows 7+. I am confused with the storage format of hashed value. </p>
  
  <p>Many materials (such as, <a href="http://en.wikipedia.org/wiki/Security_Accounts_Manager" rel="nofollow">1</a>) tells me that it uses NTLM(or NTLM v2). However, as far as I understand, the security level of NTLM is very low. Most OS(such as unix) will provide random <code>salt</code> to enhance basic security level. For NTML, we can break it easily with <code>brute force</code> in several days(even several hours with great device). Also, if we use <code>rainbow table</code>, we can achieve perfect result. </p>
  
  <p>Some other materials (such as, <a href="http://en.wikipedia.org/wiki/NTLM" rel="nofollow">2</a>) tells me that Windows Vista or above has replaced NTLM with Kerberos. Does it affect SAM? If so, in default, which hash algorithm does it use in Windows 7 or above?</p>
  
  <p>To make my question clearly, I want to list them below.</p>
  
  <ol>
  <li><p>Does NTLM or NTLMv2 use salt?</p></li>
  <li><p>Which algorithm does windows 7 or windows 8 use for SAM?</p></li>
  <li><p>Whether kerberos affects the hashed format of SAM?</p></li>
  </ol>