Privilege Escalation Privilege escalation is the attempt by an attacker who already holds some level of access to widen their rights in order to move through the network. Escalation …

Privilege Misuse Privilege misuse arises when somebody uses rights they genuinely hold for actions they have no business reason to take. Unlike privilege escalation, the attacke …

Cloud IAM misconfiguration Cloud IAM misconfiguration means a user, a service account, an application or a role holds more rights than it needs. In the cloud an identity is not merely a login. An identity is permission to read data, spin up resources, change networks, assume roles and delete backups.

Insider Threat Least privilege, separation of duties and good records are not an expression of distrust towards people but protection of the system against a situation going b …

Kerberoasting … s and regularly rotates long passwords. Add least privilege, so a service account cannot hold more rights than it needs, along with monitoring for unusual ticke …

Pass-the-Hash … o a stolen hash works on one computer only; least privilege, so high-level accounts are not used to log in everywhere; protection of the memory the hash lives i …

Rootkit … rsistence and invisibility. It gives the attacker privileged access while concealing malicious processes, files and connections from security tools. The deeper …