AndrewSpecial AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019. How to use: Run AndrewSpecial as Admin ??? Profit. Look for andrew.dmp! Throw that in mimikatz!