Potential Local Exploitation for Privilege Escalation

'This query detects a process that runs under SYSTEM user's security context and was spawned by a process that was running under a lower security context indicating an exploitation for privilege escalation. Ref: https://attack.mitre.org/techniques/T1068/'