Get lsass dump using nanodump and parse the result with pypykatz
Module Options
[*] nanodump module options:
TMP_DIR Path where process dump should be saved on target system (default: C:\Windows\Temp\)
NANO_PATH Path where nano.exe is on your system (default: /tmp/cme/)
NANO_EXE_NAME Name of the nano executable (default: nano.exe)
DIR_RESULT Location where the dmp are stored (default: DIR_RESULT = NANO_PATH)