Privilege Escalation
Privilege EscalationPersistence Windows
Seatbelt.exe is part of the GhostPack suite of tools that will perform a lot of "safety checks" on the Windows host and collect system data that could be useful for potential privilege escalation or persistence methods. The following command will run all checks on the system and store the output in a file (WARNING: will collect a lot of data. remove `-full` for less output). Command Reference: Run all checks: -group=all Output File: output.txt