Privilege Escalation

After gaining initial access, attackers frequently seek to escalate their privileges, moving from a standard user account to an administrator or system account, to access sensitive data, disable security controls, or move freely through an environment. Privilege escalation is a key indicator of malicious intent and a critical detection focus for SOC teams.