
createdump
Dumps LSASS memory by abusing Microsoft-signed WindowsApp createdump.exe, using a custom dbgcore.dll hook and winlogon impersonation for credential…
impersonation-toolspassword-attackspost-exploitation+1
149

Dumps LSASS memory by abusing Microsoft-signed WindowsApp createdump.exe, using a custom dbgcore.dll hook and winlogon impersonation for credential…