PsExec/PAExec Escalation to LOCAL SYSTEM

SigmaHQ Detections@sigmaHQ

•updated Aug 28, 2025•0•0•0

Detects suspicious commandline flags used by PsExec and PAExec to escalate a command line to LOCAL_SYSTEM rights