UAC Disabled via Registry EnableLUA Value Set to 0

Subhankar H@Andrewsec57

•updated Jul 8, 2026•2•0•12

Detects modifications to the Windows Registry where the 'EnableLUA' value is set to 0, which effectively disables User Account Control (UAC). This action is often performed by attackers to evade security prompts and maintain higher integrity levels during execution.