Bypass UAC Using DelegateExecute — Detection Rule

Bypasses User Account Control using a fileless method

Read the full analysis on IntelFusions