Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard.
These techniques also work on victims logged on before the server was compromised.
https://t.co/euNIyX2dwW
The more you learn how to hack and invest into hacking, the less likely you are to make money from it.
This may seem counterintuitive but it's true to a degree, the more you learn, the less confident you become because you know there is so much to learn.
Be proud yet humble <3
If you rename procdump.exe to dump64.exe and place it in the "C:\Program Files (x86)\Microsoft Visual Studio\*" folder, you can bypass Defender and dump LSASS.