Suspicious modification of a sensitive Group Policy (GPO)

Detects scenarios where an attacker will attempt to take control over a group policy.