TL;DR: ESC1–ESC16. Template misconfigurations turn ‘low-priv user’ into ‘forest admin’.

Stub — to be filled in.

What it is

TODO

Preconditions / where it applies

TODO

Technique

TODO

Detection and defence

TODO

References

• https://posts.specterops.io/certified-pre-owned-d95910965cd2