Why might a penetration tester need to use a PowerShell script like Invoke-WCMDump.ps1 instead of mimikatz for extracting credential passwords?

Invoke‑WCMDump.ps1 is effective for extracting plaintext passwords from Generic Credentials that are not stored by Internet Explorer, such as manually added credentials. While mimikatz can also handle Generic Credentials, it cannot extract those saved by IE. Invoke‑WCMDump can also export Domain Credentials information (excluding plaintext). Additionally, on Windows 7, when the 'Prompt for permission when a program uses this password' option is enabled, PowerShell scripts trigger a prompt that cannot be bypassed, whereas mimikatz might still work silently.