Bypassing LSA Protection (aka Protected Process Light) without Mimikatz on Windows 10

redcursor.com.au – Remove the RunAsPPL registry key and reboot (probably the worst method since you’ll lose any credentials in memory) Disable PPL flags on the LSASS process by patching the EPROCESS kernel structure Re…

Tweeted by @TheHackersNews https://twitter.com/TheHackersNews/status/1285132817903448065