susinternals - back from the dead by @deft_ @cablethief & @randomwalksp (reino) This tool allows you executing commands remotely via the PSExeSVC service from a python script. It can be used to: Authenticate as a user (with a primary token): Authenticate as system: Full blog post can be found here!