Bypass UAC via CMSTP

심각도 높음 Sigma 탐지 룰. Detect commandline usage of Microsoft Connection Manager Profile Installer (cmstp.exe) to install specially formatted local .INF files

작성자: E.M. Anhaus (originally from Atomic Blue Detections, Endgame), oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본