At this stage, the pen tester's goal is sustaining entry and escalating their privileges whilst evading security steps. Pen testers do all of this to imitate advanced persistent threats (APTs), which may lurk in the technique for weeks, months, or a long time right before they're caught.