Shadow Copies

mimikatz # misc::shadowcopies

The then lsadump::sam can be used by defining the shadow copies paths for /sam and /system.

Last updated