Lateral Movement

Active Directory

Abusing Group Policy Objects for Privilege Escalation and Lateral Movement

How attackers weaponize editable Group Policy Objects with SharpGPOAbuse and GPP cpassword, plus blue-team detection and hardening.
2026.05.12
Active Directory
Windows Privesc

Lateral Movement and Persistence with WMI

How attackers abuse WMI for remote code execution and stealthy persistence, plus the detection and defenses blue teams need.
2026.04.06
Windows Privesc