rpdata

lsadump::RpData can retrieve private data (at the time of writing, Nov 1st 2021, we have no idea what this does or refers to 🤷♂
). It has the following command line arguments:
/export
/secret
/name
/system
This command requires elevated privileges (by previously running privilege::debug or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).
mimikatz # lsadump::RpData

postzerologon

sam

Last modified 1yr ago