Senteon Blog

Windows Logon Session Types: Interactive

Henry Zhang: Nov 15, 2021 8:00:00 AM

Logon Type — Interactive Used to log on at the local console.

Commonly Abused Windows Token Privileges: SeTakeOwnershipPrivilege

Henry Zhang: Nov 8, 2021 9:30:00 AM

SeTakeOwnershipPrivilege — Take ownership of files or other objects Determines which users can take ownership of any...

Commonly Abused Windows Token Privileges: SeRestorePrivilege

Henry Zhang: Nov 1, 2021 9:45:00 AM

SeRestorePrivilege — Restore files and directories Determines which users can bypass file, directory, registry, and...

1 min read

Commonly Abused Windows Token Privileges: SeAssignPrimaryTokenPrivilege

Henry Zhang: Oct 25, 2021 8:30:00 AM

SeAssignPrimaryTokenPrivilege — Replace a process level token Determines which parent processes can replace the access...

1 min read

Commonly Abused Windows Token Privileges: SeLoadDriverPrivilege

Henry Zhang: Oct 17, 2021 10:00:00 AM

SeLoadDriverPrivilege — Load and unload device drivers Determines which users can dynamically load and unload device...

1 min read

Commonly Abused Windows Token Privileges: SeImpersonatePrivilege

Henry Zhang: Oct 11, 2021 8:30:00 AM

SeImpersonatePrivilege — Impersonate a client after authentication Determines which programs are allowed to impersonate...

Commonly Abused Windows Token Privileges: SeDebugPrivilege

Henry Zhang: Oct 4, 2021 7:45:00 AM

SeDebugPrivilege — Debug programs Determines which users can attach to or open any process, even a process they do not...

Commonly Abused Windows Token Privileges: SeCreateTokenPrivilege

Henry Zhang: Sep 27, 2021 8:00:00 AM

SeCreateTokenPrivilege — Create a token object Determines which accounts a process can use to create a token, and which...

Commonly Abused Windows Token Privileges: SeTcbPrivilege

Henry Zhang: Sep 26, 2021 8:45:00 AM

SeTcbPrivilege— Act as part of the operating system Determines whether a process can assume the identity of any user...