# Creator of mimikatz

Source: https://startwithidentity.com/experts/benjamin-delpy/
Last updated: 2026-09-20
License: content by Start with Identity. Cite the source URL.

---

## Bio

Benjamin Delpy, who publishes as gentilkiwi, wrote mimikatz in 2011 after finding that Windows held both an encrypted copy of a password and the key to decrypt it in memory at the same time. Microsoft's initial response was that exploiting it required an already-compromised machine. He published the tool, and the industry's understanding of credential theft changed.

Profile built from public project, vendor, and press records. Included as a researcher whose published work reshaped defensive practice; this is not an endorsement of any use of the tool.

## Where their work shows up

Almost every defensive control now considered standard in a Windows environment exists because mimikatz made the attack undeniable: Credential Guard, LSA protection, tiered administration, disabling WDigest, and the whole practice of treating a domain controller as a crown jewel. It also made [Kerberoasting](https://startwithidentity.com/techniques/kerberoasting/), [pass-the-hash style credential reuse](https://startwithidentity.com/techniques/credential-manager-key-extraction/), and [Kerberos delegation abuse](https://startwithidentity.com/techniques/kerberos-delegation-abuse/) teachable rather than theoretical. See the [ITDR guide](https://startwithidentity.com/guides/security/identity-threat-detection-response-guide/) and the [best ITDR for Active Directory](https://startwithidentity.com/rankings/best-itdr-for-active-directory/) ranking.