Technical – Senteon

Commonly Abused Windows Token Privileges: SeNetworkLogonRight

SeNetworkLogonRight— Access this computer from the network Provides users given this permission the ability to access the system over the network via protocols such as Sever Message Block (SMB), NetBIOs,…

Henry September 1, 2024

Technical

Commonly Abused Windows Token Privileges: SeTrustedCredManAccessPrivilege

SeTrustedCredManAccessPrivilege— Access Credential Manager as a trusted caller Provides users given this permission the ability to utilize applications or processes to abuse the credential manager in an attempt to grab…

Henry September 1, 2024

Technical

Windows Logon Session Types: NewCredentials

Logon Type — NewCredentials Used with RunAs or mapping a network drive with alternate credentials. Create a new logon session for the same user but with different credentials for other…

Henry December 20, 2021

Technical

Windows Logon Session Types: NetworkCleartext

Logon Type — NetworkCleartext Used to logon with credentials sent in clear text (only possible for certain services). Logon Type Number 8 Logon User Rights / Tokens N/A Authenticators Accepted…

Henry December 13, 2021

Technical

Windows Logon Session Types: Unlock

Logon Type — Unlock Used to unlock an Interactive Logon session. Creates a new Type 2 (Interactive) logon type. Logon Type Number 7 Logon User Rights / Tokens N/A Authenticators…

Henry December 6, 2021

Technical

Windows Logon Session Types: Service

Logon Type — Service Used to run a service as a specified account. Logon Type Number 5 Logon User Rights / Tokens SeServiceLogonRight — Log on as a service SeDenyServiceLogonRight…

Henry November 29, 2021

Technical

Windows Logon Session Types: Batch

Logon Type — Batch Used to run a scheduled task as a specified account. Logon Type Number 4 Logon User Rights / Tokens SeBatchLogonRight — Log on as a batch…

Henry November 29, 2021

Technical

Windows Logon Session Types: Network

Logon Type — Network Used to access a Windows resource (e.g. shared folder) from a system on the network. Logon Type Number 3 Logon User Rights / Tokens SeNetworkLogonRight —…

Henry November 22, 2021

Technical

Windows Logon Session Types: Interactive

Logon Type — Interactive Used to log on at the local console. Logon Type Number 2 Logon User Rights / Tokens SeInteractiveLogonRight — Allow log on locally SeDenyInteractiveLogonRight — Deny…

Henry November 15, 2021

Technical

Commonly Abused Windows Token Privileges: SeTakeOwnershipPrivilege

SeTakeOwnershipPrivilege — Take ownership of files or other objects Determines which users can take ownership of any securable object in the device, including Active Directory objects, NTFS files and folders,…

Henry November 8, 2021