ricardojoserf/NativeDump

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

↗ Open on GitHub

Stars

747

Forks

104

Language

C#

License

—

Last push

3 weeks ago

C#security-tools redteam-tools lsass lsass-dump ntapi ntdll-unhooking

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.