Unattended Install Files - Local Admin Creds

Privilege Escalation Windows Credentials windows

Common locations to inspect

C:\Windows\Panther\Unattend.xml
C:\Windows\Panther\Unattended.xml
C:\Windows\Panther\Unattend\Unattended.xml
C:\Windows\Panther\Unattend\Unattend.xml
C:\Windows\System32\Sysprep\unattend.xml
C:\Windows\System32\Sysprep\sysprep.xml
C:\Windows\System32\Sysprep\Panther\unattend.xml
C:\Windows\sysprep.inf
C:\Windows\unattend.xml
C:\unattend.xml
C:\sysprep.inf