Potential Fodhelper UAC Bypass (ASIM Version)
'This detection looks for the steps required to conduct a UAC bypass using Fodhelper.exe. By default this detection looks for the setting of the required registry keys and the invoking of the process within 1 hour - this can be tweaked as required.'
Microsoft Sentinel (KQL)
