LSA dump using Process Injection

/static/assets/windows-logo.svg
Mimikatz lsadump::sam is executed via Invoke-Mimikatz to dump hashes via process injection into LSASS. Requires a pre-staged Invoke-Mimikatz script on Operator to download and run the command.
locked
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.

Login

Test this TTP

Download Operator (1.7.1)