SYSTEM

Windows and Active Directory

The built-in account NT AUTHORITY\SYSTEM, which the operating system's own components run as. It outranks Administrator on the local machine, has no password to steal, and is the usual finish line for a privilege escalation on a Windows host.

Related terms

Administrator

Windows service

privilege escalation

LSASS

Appears in(167)

What GIS Is and Why It MattersGIS Foundations
What Is a NetworkNetworking Foundations
What PowerShell Is and Why It MattersPowerShell
What Code IsProgramming Foundations
Vector and Raster: Two Ways to Store the WorldGIS Foundations
Cmdlets, Parameters, and Getting HelpPowerShell
Coordinate Reference Systems and the Shape of the EarthGIS Foundations
Why Every Flat Map LiesGIS Foundations
TCP, UDP, and PortsNetworking Foundations
The Pipeline and ObjectsPowerShell
Automating a Real TaskPowerShell
Vector Formats: Shapefile, GeoJSON, and GeoPackageSpatial Data and Formats
Filesystem and PermissionsLinux for Security
How Routers Move PacketsNetworking Deep Dive
Your First Python ProgramIntro to Python
Raster Formats: GeoTIFF, COGs, and TilesSpatial Data and Formats
Processes and ServicesLinux for Security
GeoJSON: The Web-Native Spatial FormatSpatial Data and Formats
Text Processing: grep, awk, sedLinux for Security
NAT and Private NetworksNetworking Deep Dive
CSS: The StyleWeb Development
Where to Get Real Geospatial DataSpatial Data and Formats
Networking from the CLILinux for Security
Reading and Writing FilesPython Deep Dive
Metadata: Knowing What You Actually HaveSpatial Data and Formats
Network Automation and Infrastructure as CodeNetworking Deep Dive
Putting It OnlineWeb Development
What a Backend IsBackends and APIs
How Language Models WorkBuilding with AI
How Geometries Relate: Topology and PredicatesSpatial Analysis
Prompt EngineeringBuilding with AI
Building a REST APIBackends and APIs
Building on the APIBuilding with AI
Port Scanning Deep DiveRecon and Scanning
Connecting the API to a DatabaseBackends and APIs
RAG and EmbeddingsBuilding with AI
Spatial Joins: Combining Data by LocationSpatial Analysis
Authentication and API SecurityBackends and APIs
AI Agents and ToolsBuilding with AI
Raster Analysis: Map Algebra and TerrainSpatial Analysis
Subdomain and Content EnumerationRecon and Scanning
GeoPandas: Spatial Data as CodeGIS Programming with Python
What a Database IsSQL and Databases
Shapely: Building and Operating on GeometryGIS Programming with Python
Coordinate Transforms with pyproj and GeoPandasGIS Programming with Python
Microcontrollers and ArduinoElectronics Foundations
Inputs, Outputs, and SensorsElectronics Foundations
Rasters in Python with rasterioGIS Programming with Python
Scripting a Real GIS Pipeline End to EndGIS Programming with Python
PostGIS: Geometry in the DatabaseSpatial SQL with PostGIS
Querying Geometry with ST_ FunctionsSpatial SQL with PostGIS
Spatial Joins with ST_Intersects and ST_DWithinSpatial SQL with PostGIS
A Full Spatial Analysis in SQLSpatial SQL with PostGIS
Tiles, Slippy Maps, and Zoom LevelsWeb Mapping
CVEs and CVSSVulnerabilities and Exploitation
Sharing Data: WMS, WFS, and OGC APIsWeb Mapping
Browsing PrivatelyDigital Self-Defense
Securing Your Devices and MessagesDigital Self-Defense
Responsible Disclosure and EthicsVulnerabilities and Exploitation
Your Privacy ToolkitDigital Self-Defense
Approaching a TargetCTF Methodology
Hashing and IntegrityCryptography
PKI and CertificatesCryptography
How Passwords Are StoredPassword Attacks
Common AD AttacksActive Directory
Windows Architecture and ProcessesWindows Fundamentals
The Windows RegistryWindows Fundamentals
Windows Permissions and PrivilegesWindows Fundamentals
PowerShell for SecurityWindows Fundamentals
Windows Event LogsWindows Fundamentals
Windows Networking and SMBWindows Fundamentals
Sockets and NetworkingPython for Security
Build a Port ScannerPython for Security
Automating ReconPython for Security
What Containers Actually AreDocker and Containers
Docker ComposeDocker and Containers
Running Vulnerable Apps in DockerDocker and Containers
Container Security BasicsDocker and Containers
SQL InjectionWeb Application Attacks
Command InjectionWeb Application Attacks
File Upload AttacksWeb Application Attacks
Insecure DeserializationWeb Application Attacks
Attacking AuthenticationWeb Application Attacks
Access Control and IDORWeb Application Attacks
Setting Up Burp and the ProxyBurp Suite
MeterpreterThe Metasploit Framework
Post-ExploitationThe Metasploit Framework
A Repeatable Privesc MethodLinux Privilege Escalation
SUID Binaries and SudoLinux Privilege Escalation
Cron Jobs and PATH AbuseLinux Privilege Escalation
Kernel Exploits and CapabilitiesLinux Privilege Escalation
A Repeatable Windows Privesc MethodWindows Privilege Escalation
Service MisconfigurationsWindows Privilege Escalation
Token ImpersonationWindows Privilege Escalation
Dangerous Privileges and InstallersWindows Privilege Escalation
Defending a Wireless NetworkWireless Security
OSINT FundamentalsOpen Source Intelligence
Disk and File System ForensicsDigital Forensics
Building a TimelineDigital Forensics
The Incident Response LifecycleIncident Response
Containment, Eradication, RecoveryIncident Response
Log Analysis for RespondersIncident Response
Writing the Incident ReportIncident Response
What a SOC Actually DoesSOC Analyst Fundamentals
Escalation and HandoffSOC Analyst Fundamentals
Log Sources That MatterSIEM and Log Analysis
The Hunting MindsetThreat Hunting
Hunting in LogsThreat Hunting
IDS and IPSNetwork Defense
Network SegmentationNetwork Defense
Detecting Lateral MovementNetwork Defense
Logging and MonitoringCloud Security Fundamentals
Pods, Services, and RBACKubernetes Security
Attacking a ClusterKubernetes Security
Hardening a ClusterKubernetes Security
Assembly Crash CourseIntroduction to Binary Exploitation
Stack Buffer OverflowsIntroduction to Binary Exploitation
Controlling ExecutionIntroduction to Binary Exploitation
Security FrameworksGovernance, Risk, and Compliance
Audits and ComplianceGovernance, Risk, and Compliance
The Detection LifecycleDetection Engineering
Why Code Becomes VulnerableSecure Coding
Security Code ReviewSecure Coding
The Mobile Threat ModelMobile Application Security
Testing a Mobile AppMobile Application Security
ICS and OT PrimerIoT and OT Security
Why Crypto Implementations FailCryptographic Attacks
Recognizing Bad CryptoCryptographic Attacks
Why You Need a LabBuilding a Home Lab
Choosing VirtualizationBuilding a Home Lab
Networking Your LabBuilding a Home Lab
Stocking It With TargetsBuilding a Home Lab
Snapshots and Safe HabitsBuilding a Home Lab
What Threat Modeling Buys YouThreat Modeling
STRIDEThreat Modeling
Data Flow DiagramsThreat Modeling
Threat Modeling a Real AppThreat Modeling
Turning Threats Into FixesThreat Modeling
The Report Is the ProductWriting Security Reports
Writing a FindingWriting Security Reports
The Executive SummaryWriting Security Reports
The Map of Security RolesBreaking Into Security
Certs, Skills, and DegreesBreaking Into Security
Building a Portfolio That Gets NoticedBreaking Into Security
The Technical InterviewBreaking Into Security
Staying SharpBreaking Into Security
Prioritizing With ContextVulnerability Management
Remediation and SLAsVulnerability Management
Privileged Access ManagementIdentity and Access Management
The Identity LifecycleIdentity and Access Management
Identity as the PerimeterZero Trust Architecture
SPF, DKIM, and DMARCEmail Security
How DNS Really WorksDNS and Network Services Security
DHCP and NTP RisksDNS and Network Services Security
The Supply Chain Attack SurfaceSoftware Supply Chain Security
Classifying DataData Protection and Privacy
Encryption at Rest and in TransitData Protection and Privacy
Privacy Laws That BiteData Protection and Privacy
Exponents and LogarithmsMathematics Foundations
Integrals and AccumulationMathematics Foundations
Work, Energy, and PowerPhysics Foundations
Waves and SoundPhysics Foundations
Kirchhoff's LawsCircuit Analysis
When Classical Physics BreaksQuantum Foundations
Wave-Particle DualityQuantum Foundations
Superposition and QubitsQuantum Foundations
Quantum Computers in PracticeQuantum Foundations