UAC Bypass Tools Using ComputerDefaults — Detection Rule

Detects tools such as UACMe used to bypass UAC with computerdefaults.exe (UACMe 59)

Read the full analysis on IntelFusions