Thanks for that. I'll give it a go.

We set up a test machine at work to practice some security skills. There is an accessible writable folder that could be possible entry point. I can Post files to the folder, and I've logged on to check that all files are successfully written. (We disabled all anti-virus protection to make it easier)...