Always Install Elevated MSI Spawned Cmd And Powershell

Yamato Security Hayabusa@YamatoSecurityHayabusa

updated Jun 24, 202504

Detects Windows Installer service (msiexec.exe) spawning "cmd" or "powershell"

Sigma