README.md

sysMinidumpWD

A lsass dump tool using MiniDumpWriteDump & syscall(NtOpenProcess) technique. only tested on windows 11 with defender enabled:-)

一个lsass dump工具，使用MiniDumpWriteDump和syscall（NtOpenProcess）。只测了下defender.

Reference

klezVirus/SysWhispers3: SysWhispers on Steroids - AV/EDR evasion via direct system calls. (github.com)