Google Project Zero releases PowerShell suite to map Windows sandbox attack surface
The repo provides a set of PowerShell tools that impersonate sandboxed process tokens to probe what resources a sandbox can access, letting researchers spot misconfigurations. It includes utilities for token inspection, memory section handling, and NT object enumeration, and runs best with admin rights.