Techniques

PowerUp

Invoke-AllChecks

Get-ServiceUnquoted
Get-ModifiableServiceFile
Get-ModifiableService

Get-WMIObject Win32_service | select Name, PathName
Invoke-ServiceAbuse