Kernel mode WinDbg extension and PoCs for token privilege investigation. - View it on GitHub