process

sekurlsa::process switches (or reinits) to LSASS process context. It can be used after sekurlsa::minidump.

mimikatz # sekurlsa::minidump lsass.dump.dmp
Switch to MINIDUMP : 'lsass.dump.dmp'
mimikatz # sekurlsa::process
Switch to PROCESS

Last updated