Bypass UAC via Fodhelper.exe — Detection Rule

Identifies use of Fodhelper.exe to bypass User Account Control. Adversaries use this technique to execute privileged processes.

Read the full analysis on IntelFusions