PowerUp Invoke-AllChecks

Import-Module .\PowerUp.ps1 ; Invoke-AllChecks

Scans the host for local privilege escalation vectors: services with modifiable paths, weak permissions, AlwaysInstallElevated, DLL hijacking, and credentials in files.

When you already have a shell on the host (as a standard user) and want a quick inventory of potential paths to SYSTEM. It's the starting tool in any local privesc: within minutes it lists the most common vectors and automated checks.

If the EDR blocks PowerSploit loading by signature (Invoke-AllChecks is heavily signed). On heavily monitored hosts with 4104 enabled, the full module scriptblock gets logged. For quieter scans use PrivescCheck or SharpUp.