Detects indicators of a UAC bypass method by mocking directories
Read the full analysis on IntelFusions