UAC Bypass Using MSConfig Token Modification - Process — Detection Rule

Detects the pattern of UAC Bypass using a msconfig GUI hack (UACMe 55)

Read the full analysis on IntelFusions