Wizard Spider has modified the Registry key "HKLM\System\CurrentControlSet\Control\SecurityProviders\WDigest" by setting the "UseLogonCredential" registry value to "1" in order to force credentials to be stored in clear text in memory.