UAC Bypass Using DismHost — Detection Rule

Detects the pattern of UAC Bypass using DismHost DLL hijacking (UACMe 63)

Read the full analysis on IntelFusions