RustiveDump: dump the memory of the lsass.exe process