UAC Bypass Using PkgMgr and DISM — Detection Rule

Detects the pattern of UAC Bypass using pkgmgr.exe and dism.exe (UACMe 23)

Read the full analysis on IntelFusions