This is a list of software I have written to support many of the subjects I will try to cover.


ABTokenTools

These are a few tools, sometimes updated, to set user and object permissions.

Described here: abtokentools github

Download here for x64: abtokentools download x64
Download here for ARM64: abtokentools download arm64
Download here for x86: abtokentools download x86
Download here for ARM: abtokentools download arm

Note that the 32 bit ARM version is there only for the purpose of completeness. I believe Windows 10 and 11 do not support running 32 bit ARM binaries any more.

Also note that not all tools are available for all platforms. 32 bit platforms are fairly limited.


Elephant

This is a security descriptor editor. It requires ABTokenTools and should be copied into the same directory.

image

It comes with a scheduled task security descriptor editor named TuskForce (which requires access to the registry key in which it is suppoed to edit security descriptors).

image

Download here: elephant download x64 It should work on x64 and ARM64.


GeneralTestService

This is a Windows service that does nothing useful except being a service and logging what permissions it has. It also runs a PowerShell script. This allows for testing of permissions of whichever account and configuration is applied to the service.

GeneralTestService, when first started as LocalSystem, creates a registry key
HKLM:\SOFTWARE\AB\GeneralTestService\
in which there will be a self-explanatory subkey for each image name installed as a service. (You can install several instances of GeneralTestService with different image names.)

Download here: generaltestservice download