Alteração de DACL em Pasta de Sistema Config.Msi
Detects changes to the Discretionary Access Control List (DACL) of files within the C:\Config.Msi directory by processes other than msiexec.exe or TrustedInstaller.exe. This directory is used by the Windows Installer and unauthorized modifications to its contents or permissions may indicate an attempt to tamper with installation processes or escalate privileges.
CQL
