01 — Windows beginner map

Learning objectives

• Point at boot → Winlogon → Explorer and say why LSASS/SCM matter later
• Enum a foothold: whoami / privileges / services / readable secrets in the clear
• Escalate via weak service / file perms / simple misconfig before credential dumping

Intuition

Local Windows is still “where am I / who am I / what is misconfigured?” Tokens and UAC matter; domain attacks are a different track.

Friend path

1. Skim architecture
2. AI1 enum [Beginner]
3. AI2 privesc — stop at service/file permission wins; skip advanced token tricks if stuck >30 min
4. Labs

Park for later