redteamwynns

Vert, Mimikatz can patch RDP services in real time to allow multi users to connect, and I don't think it notifies the other user at all. It would be neat to run Mimikatz first if you've already got admin privs, extract users cleartext pw out of memory, and RDP as the same user to try to fly a bit more under the radar. Invoke-Mimikatz -Command 'privilege::debug ts::multirdp exit'