SAM stands for the Windows Security Account Manager. It is a Windows component that stores local user-account and security information, including data used to manage local logons and account-related protections. Because it holds sensitive account metadata, access to SAM can reveal useful information about who exists on a system and how local authentication is organized.
In cyber security, SAM matters because attackers often target it after gaining a foothold on a host. Reading or manipulating SAM data can support privilege escalation, local reconnaissance, and offline password-attacks against recovered account material. Defenders treat SAM as sensitive because exposure can help an intruder move from a limited user context toward broader control of the machine. Hardening measures such as least privilege, credential protection, and limiting administrative access reduce the value of a local compromise and make SAM access harder to abuse.