CollectorService https://rastamouse.me/2019/04/weaponising-privileged-file-writes-with-windows-collector-service/