mimikatz

Mimikatz is an open-source Windows security research tool with modules for inspecting credential material available through LSASS logon sessions, creating an authentication context via pass-the-hash, requesting directory replication data (DCSync), and, in x64 builds, modifying an object sIDHistory attribute. The reviewed examples also include DCShadow replication abuse and a Skeleton Key-style domain-controller authentication-process patch. Availability and impact depend on Windows protections, privileges, and directory configuration.