What would you think about a parameter to specify to mimikatz what handle for LSASS to use? User would provide it as an integer, mimikatz would cast that as a handle. Then use it instead of creating a new one with OpenProcess. This would be useful when you have obtained a handle to LSASS in a manner that bypasses some detection and want to use it for dumping, etc. It would be more useful for the DLL (since the handle is only valid per-process), but could also be used in the EXE if the new mimikatz process duplicated that handle from the parent process.
Is this a feature that you would be interested in seeing in mimikatz? If so and you don't have the time to do it, I could try to submit a PR. Just wanted to check if it is a feature that you think fits with the project.
What would you think about a parameter to specify to mimikatz what handle for LSASS to use? User would provide it as an integer, mimikatz would cast that as a handle. Then use it instead of creating a new one with OpenProcess. This would be useful when you have obtained a handle to LSASS in a manner that bypasses some detection and want to use it for dumping, etc. It would be more useful for the DLL (since the handle is only valid per-process), but could also be used in the EXE if the new mimikatz process duplicated that handle from the parent process.
Is this a feature that you would be interested in seeing in mimikatz? If so and you don't have the time to do it, I could try to submit a PR. Just wanted to check if it is a feature that you think fits with the project.