During an internal engagement, you have gained a low-privileged shell on a Linux web server as the user 'www-data'. Your goal is to escalate to root. As part of enumerating the host, you want to identify locally installed binaries that could be abused to run commands with elevated privileges due to misconfigured file permissions. Which command should you run first to surface the most likely privilege-escalation candidates?