CMD START Runas UAC Elevation
Detects suspicious use of cmd.exe with the START command and runas verb, a technique used to forcefully prompt for User Account Control (UAC) elevation.
Microsoft Sentinel (KQL)
Detects suspicious use of cmd.exe with the START command and runas verb, a technique used to forcefully prompt for User Account Control (UAC) elevation.
Already have an account?