
hashmuncher
Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
hash-analysisinformation-gatheringpacket-sniffing-analysis+3
128

Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later

C# version of NTLMRawUnHide