Sdclt Child Processes — Detection Rule
A General detection for sdclt spawning new processes. This could be an indicator of sdclt being used for bypass UAC techniques.
A General detection for sdclt spawning new processes. This could be an indicator of sdclt being used for bypass UAC techniques.