lsadump::RpData can retrieve private data (at the time of writing, Nov 1st 2021, we have no idea what this does or refers to
). It has the following command line arguments:
  • /export
  • /secret
  • /name
  • /system
This command requires elevated privileges (by previously running privilege::debug or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).
mimikatz # lsadump::RpData
Last modified 1yr ago