Potential Privilege Escalation Tool Execution

nomit vyas@xoxo

•updated Jun 24, 2026•0•0•1

Detects the execution of known privilege escalation tools such as SweetPotato, JuicyPotato, RoguePotato, PrintSpoofer, and BadPotato. These tools are commonly used by attackers to escalate privileges on compromised Windows systems.