https://blog.kairostay.com/posts/THM-Investigating-Windows/