UAC Bypass Using .NET Code Profiler on MMC — Detection Rule

Detects the pattern of UAC Bypass using .NET Code Profiler and mmc.exe DLL hijacking (UACMe 39)

Read the full analysis on IntelFusions