Privilege Escalation via Sensitive Privilege Use or Special Logon Rights Assignment

Ankit Mehta@Secvyn

•updated Jun 30, 2026•1•0•3

Detects accounts performing multiple sensitive operations, privilege assignments, or privileged service calls in a short timeframe, which may indicate account compromise, reconnaissance, or lateral movement.