I saw that lsass was a Protected Process, so I unprotected it and was able to do the full dump. I used some google-fu and it didn't take me very long from there.

I've used both of these tools before so I didn't have much trouble figuring out the exercise. I forgot to turn off Windows Defender and it swallowed Mimikatz. To do this I played with Sysinternals Process Explorer and the infamous Mimikatz. I had to run the exercise file and then create a full dump of lsass process memory without rebooting the machine. I have a few lab machines at home and for this I was able to do everything on an older laptop running Windows 10. Oh and each day there was a required test to top it off. Every day, for 5 days, I was given a video lesson, a case scenario, an exercise file, and a challenging assignment to complete. The Challenge started on March 2nd and finished on March 6th. I've watched several presentations given by Paula Januszkiewicz, CEO of CQURE and everything I've seen has always been awesome. I was happy to be able to register again. This is the second time I've taken their challenge and the first time was a blast. It's a computer security challenge aimed at teaching you some new security skills.

Last week I participated in CQURE's 5-Day Online Challenge.

Open kdbx file online