All Detections

UAC Bypass Abusing Winsat Path Parsing - Registry

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects the pattern of UAC Bypass using a path parsing issue in winsat.exe (UACMe 52)

Sigma