title: Which windows API call when the user change password? what the good way to hook this API?
body: <p>I want to know when user try to change his password, and even hook this function.</p>
  
  <p>I know there is <a href="https://en.wikipedia.org/wiki/Graphical_identification_and_authentication" rel="nofollow">GINA</a> option, and that was replaced from Vista to <a href="https://msdn.microsoft.com/en-us/library/bb776042(VS.85).aspx" rel="nofollow">ICredentialProvider</a>.
  But at these two, I didn't find a specific API that will called anyway, or one function for every method, that will called when the user change his password.
  I think implement DLL proxy for the specific API (after I will find it), there is any better way to implement this hook, to catch the change password user and modify it?</p>
  
  <p>In Addition, at my research I found the function 
  <strong>ChangeAccountPassword</strong>.</p>
  
  <p>And also reference to <strong>SpInitialize</strong> function with maybe relevant parameter:</p>
  
  <pre><code>typedef struct SECPKG_FUNCTION_TABLE {
  ...
  SpSetExtendedInformationFn       *SpChangeAccountPasswordFn;
  ...
  };
  </code></pre>
  
  <p>Any advice?</p>
  
  <p>Thanks</p>