7. Windows Privilege Escalation

Question 1

Windows Privilege Types

Answer 1

Local: Guest User
Local: Regular User
Local: Admin
Local: NT Authority
Domain: Regular User
Domain; Delegated Admin
Domain: Domain Admin
Domain: Enterprise Admin

Question 2

what is Privilege Escalation

Answer 2

elevate user’s privilege level

Question 3

WinLogon

Answer 3

1. choose OS
2. Mount OS
3. override sethc.exe with cmd.exe
4. Execute cmd.exe with high-level privilege
5. Add user and password

Question 4

Offline Mitigation

Answer 4

1. BIOS Password
2. Encrypt Drive
3. Limit Physical Access

Question 5

Online Mitigation

Answer 5

1. Least privilege
2. remove Local Admin rights
3. Account Audits
4. User Account Controls
5. Applocker
6. Software
7. Code
   8 Tokens

Question 6

Hide user

Answer 6

add $

regedit