README
Windows intermediate track (F2-I)
After F2-B: finish host privesc depth, then credential harvesting and light persistence — still local-box, before AD intermediate.
| Step | What |
|---|---|
| 00 | This page |
| 01 | Map |
| 02 | Architecture — LSASS / SAM / registry as map |
| 03 | AI2 remainder + AI3–4 ([Intermediate]) |
| 04 | Labs |
| Later | AD intermediate · full operator F2 |
Prerequisite: Archetype-class foothold + at least one Easy Windows root.