load incognito list_tokens -u impersonate_token $DOMAIN\\$USER Not 100% sure where the “tokens” come from here… Mimikatz, maybe?