Dump Proccesses¶
title="Dump specific process
.\procdump64.exe -ma <PID> -accepteula
https://live.sysinternals.com/
Mimikittenz¶
Check memory of user processes for passwords. By defalt checks IE, Chrome, and Firefox for POST requests to well known websites.