使用mimikatz ERROR进行内存分析的Windbg


0

我正在使用windbg版本6.12并使用mimilib.dll来调试内存。一切正常,直到我在UI上获得以下输出

0:000> !mimikatz

DPAPI Backup keys
=================

Current prefered key:       

Compatibility prefered key: 

SekurLSA
========
[ERROR] [CRYPTO] Acquire keys

注意:内存dmp是 lsass

这与符号或相应的dll / system32有什么关系吗?请建议。

Answers:


By using our site, you acknowledge that you have read and understand our Cookie Policy and Privacy Policy.
Licensed under cc by-sa 3.0 with attribution required.