UAC Consent Prompt Behavior Weakened
Detects registry modifications setting ConsentPromptBehaviorAdmin to 0, which weakens UAC protections by elevating without prompting. This behavior was observed in the TAX#TRIDENT campaign where a script disguised as a PNG altered UAC policies prior to silently installing a ManageEngine agent.
Sigma
