A pen tester is able to pull credential information from memory on a Windows system.

The technique is more effective through perimeter firewalls than otherauthentication attacks.

It allows the tester to escalate the privilege level of the account,

Access to the system can be gained without password guessing or cracking.

Salts are removed from the hashes to allow for faster, offline cracking