Privilege escalation hunting¶

Runbooks for hunting privilege escalation activity: SUID and capability abuse on Linux, token impersonation and named pipe exploitation on Windows, and UAC bypass techniques.