Processing Credentials Offline
In this section, we’ll process the credentials “offline”
by dumping the required memory section from the target’s LSASS
and uploading it to a different Windows machine,
where we can safely extract the credentials.
This will help avoid detection since Mimikatz will neither be uploaded to,
nor run from, the target machine.