What issue does RdpThief encounter on Windows 7 and what are the recommended solutions?

On Windows 7, RdpThief fails to capture the server name because the hooked API `SspiPrepareForCredRead` does not exist. One solution is to hook `CredReadW` instead, which does record the Server name. Alternatively, after a remote desktop connection is established, you can read the server name from the registry via the [remote desktop connection history](/news/penetration-techniques-obtaining-remote-desktop-connection-history-on-windows-systems). Both approaches restore full credential capture on Windows 7.