Dump LSASS quietly with the comsvcs MiniDump export
A signed rundll32 call into comsvcs.dll writes an LSASS minidump without dropping mimikatz, sidestepping name-based detections.
Tag: lolbin
Stage and execute with signed LOLBins
Trusted Windows binaries fetch and run code, avoiding a fresh unsigned executable on disk.