Potential Privilege Escalation To LOCAL SYSTEM

SigmaHQ Detections@sigmaHQ

•updated Aug 28, 2025•0•0•0

Detects unknown program using commandline flags usually used by tools such as PsExec and PAExec to start programs with SYSTEM Privileges