🎯 Credential Dumping

The items that name it 9

• A quiet week in infosec <.<
  article2026-10-29

  NIK C2 dumps credentials from compromised Windows hosts

• Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack | Huntress
  writeup2026-10-06It is written here as Credential dumping (LSASS).

  procdump.exe run from C:\PerfLogs, presumably to dump lsass.exe process contents for credential theft

• Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
  article2026-09-17

  Use of Impacket's secretsdump.py to extract credentials and password hashes from collected ntds.dit, SAM, and SYSTEM files.

• awesome-osint-arsenal
  repo2026-07-31It is written here as Credential dumping (post-exploitation).

  post-exploitation

• CitrixBleed 2 (CVE-2025-5777) 7Steps to Dragonforce Ransomware | Huntress
  writeup2026-07-09

  Running Mimikatz from anomalous directories to dump credentials.

• Defence Impairment Olympics
  writeup2026-06-29

  Execution of tools g.com and hs.com to dump passwords and hashes to pass.txt and hash.txt, followed by deletion of the Mimikatz kernel driver mimidrv.sys

• mukul975/Anthropic-Cybersecurity-Skills
  repo2026-05-26It is written here as Credential Dumping (LSASS).

  Example agent workflow: hunting-for-credential-dumping-lsass skill checks LSASS access patterns and correlates with event log evidence when analyzing a memory dump for credential theft

• Reflecting on AI in 2025: Faster Attacks, Same Old Tradecraft
  writeup2026-01-12

  AI-generated PowerShell script used for credential access after RDP compromise (Case study 1).

• Zero-point Security's Red Team Ops (CRTO) review
  writeup2022-05-01

  Known attack technique taught in the course, followed by a guided lab