CVE-2019-1388 Privilege Escalation via UAC and Internet Explorer

SigmaHQ Detections@sigmaHQ

•updated Dec 1, 2024•2•0•33

Detects an exploitation attempt of CVE-2019-1388, a privilege escalation vulnerability. This involves the UAC consent dialogue (consent.exe) invoking an Internet Explorer process (iexplore.exe) with system-level privileges, indicated by 'System' or 'S-1-16-16384' integrity level and a command line containing ' http'.