Windows Indirect Command Execution used to bypass application whitelisting
pentestlab.blog