Exploitation for Privilege Escalation

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of vulnerabilities can take place locally or remotely.

• Keep systems patched
• Use exploit protection features
• Implement least privilege
• Application sandboxing

• Monitor for unusual process behavior
• Track privilege changes
• Detect known exploit signatures