live process

What it does

Process manipulation commands.

Remarks

Requirements

Administrative privileges, OR a user account that has SE_DEBUG enabled.

Subcommands

• create : Spawns a new process in the context of another user.

Switches

• --sid : Impersonate given SID in new process. Default: SYSTEM SID.
• -c: Full path to the executable you want to run. Default: cmd.exe

Examples

• pypykatz live process create: Spawns a SYSTEM shell
• pypykatz live process create -c regedit: Executes regedit with SYSTEM privileges