PrivescCheck

. .\PrivescCheck.ps1 ; Invoke-PrivescCheck -Extended

Audit the host for privilege escalation vectors (services, tasks, registry, files with weak permissions) with extended mode.

When you need a more comprehensive privesc scan than PowerUp (includes scheduled tasks, ACLs, unquoted services, registry credentials) and want a script that is still actively maintained. The -Extended mode adds additional checks that take more time.

If you lack permissions to read certain keys or the host is critical and you don't want to generate load: extended mode runs many checks. For a quick first look, use normal mode (without -Extended).