Conducting a multi-stage audit with physical social engineering and a technical review of the Citrix platform using penetration tests with a focus on privilege escalation