SeImpersonatePrivilege

Security

Abusing Windows Token Privileges: The Potato Attack Family

How service accounts with SeImpersonatePrivilege escalate to SYSTEM via JuicyPotato, PrintSpoofer, and RoguePotato, plus blue-team defenses.