This is a Windows Active Directory machine that focuses on Responder to capture a user hash for the initial foothold and abusing SeRestore privilege with a Windows binary to get NT SYSTEM shell for privilege escalation.
BONUS: I also showed the intended way of solving the machine which involves abusing the Default Domain Policy with SharpGPOAbuse.exe to add the low level user to local Administrators account.