https://www.hackingarticles.in/credential-dumping-local-security-authority-lsalsass-exe/
Credential Dumping: Local Security Authority (LSA|LSASS.EXE)