Katz Stealer CMSTP.exe UAC Bypass
Detects the execution of the Microsoft Connection Manager Profile Installer (cmstp.exe) with command-line arguments that are commonly used to bypass User Account Control (UAC) and execute malicious INF files. This technique is leveraged by malware like Katz Stealer.
Splunk (SPL)
