Awesome
psgetsystem
Impersonate user via parent process spoofing using ps1 and embeded c# <br> https://decoder.cloud/2018/02/02/getting-system/
PS> . .\psgetsys.ps1
PS> ImpersonateFromParentPid -ppid <parentpid> -command <command to execute> -cmdargs <command arguments>