Gpresult Display Group Policy Information — Detection Rule

Detects cases in which a user uses the built-in Windows utility gpresult to display the Resultant Set of Policy (RSoP) information