mimikatz-process
Manage process privileges and tokens. tldr-pages
On Windows
Windows
List processes with their tokens
mimikatz "process::list"IdentifyTrips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton
Elevate mimikatz to a SYSTEM process
mimikatz "process::token /user:NT AUTHORITY\SYSTEM"IdentifyTrips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton