NativeDump

NativeDump is a specialized tool designed for dumping the lsass process using native NT APIs to create a minimal Minidump file compatible with analysis tools like Mimikatz or Pypykatz. Key features include the use of functions from Ntdll.dll for stealth and bypassing API hooking, the capability to transfer dump data without writing to disk, and several implementations across various programming languages, enhancing portability and flexibility in deployment. It has been tested against modern Windows environments while offering optional enhancements for remote exfiltration and advanced obfuscation techniques.