Privilege escalation via runas (command)

Detects scenarios where attack attempts to elevate privileges via the command runas.