There a certain elevation command that’s always first on my check list after gaining access to an account. When that returns something on a HTB Easy machine that’s the way forward.
It made it unambiguous which program/service/feature is the attack surface on this box.