HackTool - Empire PowerShell UAC Bypass — Detection Rule

Detects some Empire PowerShell UAC bypass methods

Read the full analysis on IntelFusions