Potential SystemNightmare Exploitation Attempt — Detection Rule

Detects an exploitation attempt of SystemNightmare in order to obtain a shell as LOCAL_SYSTEM

Read the full analysis on IntelFusions