foxforensics/hashdump

# Hashdump Dump password hashes and records from an offline Active Directory database. go install go.foxforensics.dev/hashdump@latest ## Usage $ hashdump [-u|g|c] NTDS SYSTEM ### Options * `-u` Dump all users * `-g` Dump all groups * `-c` Dump all computers ## License Released under the [MIT License](LICENSE.md).

标签：EVTX分析