• Mimikatz can be used to dump credentials, tickets, and many more interesting attacks!
• Invoke-Mimikatz, is a PowerShell port of Mimikatz. Using the code from ReflectivePEInjection, mimikatz is loaded reflectively into the memory. All the functions of mimikatz could be used from this script.
• The script needs administrative privileges for dumping credentials from local machine. Many attacks need specific privileges which are covered while discussing that attack.

Extracting Credentials from LSASS

OverPass-The-Hash

DCSync