SAMDump extracts Windows SAM and SYSTEM files using Volume Shadow Copy Service without leaving traces on the target filesystem. It supports local saving and remote transfer, with options for XOR encoding to help avoid detection. The tool is implemented in multiple programming languages and requires elevated privileges to operate.