Event ID: 4673

Sensitive Privilege Use

• SeTcbPrivilege - Allows a process to assume the identity of any user and thus gain access to the resources that the user is authorised to access.

• Can be linked to T1068