Windows Authentication Process
Attacking SAM, SYSTEM, and SECURITY
Attacking LSASS
Attacking Windows credentials manager
Attacking Active Directory and NTDS.dit
Credential Hunting in Windows