Return to Revisions

You can dump lassas direcly from task manager or use procdump,in this case you are a local administrator on machine but you have not full admin token,i.e task manager is not running as administrator on windows 7 and you did not invoke UAC (consent.exe),then you can use mimikatz to grab LSA secrets