# Chapter 4 - Windows Post-Exploitation
> _Practice the principle of least privilege. Do not log into a computer with administrator rights unless you must do so to perform specific tasks. Running your computer as an administrator \(or as a Power User in Windows\) leaves your computer vulnerable to security risks and exploits. Simply visiting an unfamiliar Internet site with these high-privilege accounts can cause extreme damage to your computer, such as reformatting your hard drive, deleting all your files, and creating a new user account with administrative access.” _
>
> _**— Indiana University \(Best practices for computer security\)**_
This is the phase I like to refer to as second pass enumeration or enumeration from the inside. Now that we've gained a foothold into the network it is crucial to run all of our enumeration from the ground up as an inside actor.
##### Resources
[Windows Privilege Escalation Fundamentals - FuzzySecurity](http://www.fuzzysecurity.com/tutorials/16.html)
[Windows PrivEsc Check - GitHub](https://github.com/pentestmonkey/windows-privesc-check)
[Windows Exploit Suggester - GitHub](https://github.com/GDSSecurity/Windows-Exploit-Suggester)
[Encyclopaedia Of Windows Privilege Escalation - YouTube](https://www.youtube.com/watch?v=kMG8IsCohHA)
[Level Up! Practical Windows Privilege Escalation - YouTube](https://www.youtube.com/watch?v=PC_iMqiuIRQ)
This file has been truncated. show original