Where is the encrypted password data stored in ADAudit Plus, and how can I query it?

The encrypted passwords are stored in the `public.aaapassword` table. You can query it using psql with the command: `SELECT * FROM public.aaapassword ORDER BY password_id ASC;`. To filter only custom users and their hashes, perform an inner join with `public.aaalogin` where `domainname = 'ADAudit Plus Authentication'`. Reference the ADAudit Plus Exploitation Analysis — Data Encryption Analysis for exact commands.