This unit describes the performance outcomes, skills and knowledge required to apply penetration testing methodology frameworks and tools to implement an exploitation test in the form of privilege escalation in Windows operating systems. The conduct of a penetration test is designed to gain access to an organisation’s digital environment and exploit its vulnerabilities. It involves providing a report on the findings of the exploitation test and on required remediation steps.

The unit applies to those working as offensive cyber security professionals, either within their own organisation or as independent cyber security researchers. As members of the penetration testing team, they apply specialised protocols and diverse penetration testing methods to find and report vulnerabilities to organisations across a variety of fields and industry sectors, with the aim of strengthening their infrastructure defences.

No licensing, legislative or certification requirements apply to this unit at the time of publication.