Monitor Processes

It possible that the administrative user used command line with sensitive information exposed. In this situation monitoring the process can reveal this sensitive information.

Monitoring the processes - Local Privileges Escalation