THE MIMIKATZ MISSING MANUAL

Summary from the TLDR InfoSec newsletter

Carlos Perez (DarkOperator) has publicly released "The Mimikatz Missing Manual," a comprehensive guide originally developed as private training material with direct input from Mimikatz author Benjamin Delpy, covering Windows identity, Kerberos, and PKI research. The manual spans seven parts, including LSASS credential extraction, Kerberos ticket forgery, DCSync/DCShadow persistence, and DPAPI abuse, with guidance tailored for red teams, blue teams, and security researchers. Available as a GitHub Pages site, it emphasizes not just command references, but the underlying Windows Security Authority internals being manipulated.