mimikatz

Windows credential extraction (authorized red-team / forensics).

$ pypykatz lsa minidump lsass.dmp