Mimikatz is a well-known open-source tool for extracting credentials from Windows systems. The Blue Report 2026 shows that while classic LSASS memory dumping is blocked 94% of the time, alternative methods like reading from registry or other memory locations are almost never prevented. This highlights the gap between signature-based detection and behavioral prevention.