The Backup Operators is a Windows built-in group. Users which are part of this group have permissions to perform backup and restore operations. More specifically,…

Continue reading → Domain Escalation – Backup Operator

Windows Event logs are the main source of information for defensive security teams to identify threats and for administrators to troubleshoot errors. The logs are…

Continue reading → Persistence – Event Log