# From Memory

- [lsass.exe](/pentest/infrastructure/ad/credential-harvesting/from-memory/lsass.md): Local Security Authority Subsystem Service
- [svchost.exe](/pentest/infrastructure/ad/credential-harvesting/from-memory/svchost-exe.md)