Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS - View it on GitHub