Windows LPE via StorSvc (writable SYSTEM path DLL hijacking)
https://github.com/blackarrowsec/redteam-research
Comme le soleil, les machines ne se couchent jamais.