- Microsoft Windows
- IIS Web server
- MSSQL DB
Let's say an application gets compromised with an RCE, what's the best scenario of protecting the database connection string file or any other sensitive configuration files.
- DPAPI is not an answer here, because you would be running under the same context as the application.
- HSM is a hard-core solution and also would somehow need to be accessed by the user running the application, meaning it can be compromised
What other options are there?