Fastest way to shutdown a VM:
drag & drop mimikatz.exe while the host AV is active
On VM> Why did the computer shut down unexpectedly ?
Well, you don't want to know ;-)
I'm surprised, it means you must do security about stuff you put in the Cloud?
Like audit, permission reviews, etc.?
Maybe it will cost some $/€ after all.
Too bad for the hours I spent writing this in C, but I did finally figure out how to do the Primary Refresh Token key derivation in Python. This means you can now use the session key from Mimikatz directly in roadlib/roadrecon! Only with version on GitHub github.com/dirkjanm/ROADtool…