Bypass UAC via WSReset.exe — Detection Rule

Detects use of WSReset.exe to bypass User Account Control (UAC). Adversaries use this technique to execute privileged processes.

Read the full analysis on IntelFusions