Backup Operators

Abusing SeBackupPrivilege and SeRestorePrivilege for Windows Privilege Escalation

How attackers abuse SeBackupPrivilege/SeRestorePrivilege to dump SAM, SYSTEM, and ntds.dit, plus blue-team detection and defense.

Windows Privesc