Windows box without kernel exploit privesc

VbScrub will make videos about active directory
you can also find documentation here (thanks minatotw):https://blog.harmj0y.net/