CMSTP UAC Bypass via COM Object Access

심각도 높음 Sigma 탐지 룰. Detects UAC Bypass Attempt Using Microsoft Connection Manager Profile Installer Autoelevate-capable COM Objects (e.g. UACMe ID of 41, 43, 58…

작성자: Nik Seetharaman, Christian Burkard (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본