UAC Bypass Using Windows Media Player - Process — Detection Rule

Detects the pattern of UAC Bypass using Windows Media Player osksupport.dll (UACMe 32)

Read the full analysis on IntelFusions