Who Should be Alerted of Privilege Escalation Events?

Hackers get into our systems for data theft and other reasons.  The Cyber Kill Chain identifies privilege escalation as a key step, right after exploitation and before