psgetsystem

Impersonate user via parent process spoofing using ps1 and embeded c#
https://decoder.cloud/2018/02/02/getting-system/

PS> . .\psgetsys.ps1 

PS> ImpersonateFromParentPid -ppid <parentpid> -command <command to execute> -cmdargs <command arguments>