Dump64.exe

Memory dump tool that comes with Microsoft Visual Studio

Dump

Create memory dump and parse it offline to retrieve credentials.

dump64.exe {PID} out.dmp

Creates a memory dump of the LSASS process. — MITRE: T1003.001 — Privileges: Administrator