The Mimikatz credential dumper has been extended to include Skeleton Key domain controller authentication bypass functionality. The "LSADUMP::ChangeNTLM" and "LSADUMP::SetNTLM" modules can also manipulate the password hash of an account without knowing the clear text value.