1
As Windows is case-insensitive, the string mimikatz can be evaluated the same as MIMIKATZ or MimIkaTZ. A naive method of AV evasion by switching cases of some characters in suspicious string has been demonstrated here where the string wdigest.dll is simply replaced with the same thing but with so...