Nearing completion, just fixing a bug...or two
next idea is to remove process protection on AV: https://learn.microsoft.com/en-us/windows/win32/services/protecting-anti-malware-services
-
Notifications
You must be signed in to change notification settings - Fork 0
EvanDesR/removingLSASS_ProcessProtection
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Kernelmode program removing LSASS.exe's processs protection allowing mimikatz and other memory dumpers to extract windows credentials.
Topics
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published