Extracts LSA secrets

Usage

• Credential harvesting detection

Commands

# Dump LSA secrets (Volatility 2)  
vol.py -f <mem> --profile=<profile> lsadump  
  
# Dump LSA secrets (Volatility 3)  
python3 vol.py -f <mem> windows.lsadump