All Detections

Bypass UAC via CMSTP

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025011

Detect commandline usage of Microsoft Connection Manager Profile Installer (cmstp.exe) to install specially formatted local .INF files

Sigma