Low Privileged process spawning elevated process from remote session
Low Privileged process spawning elevated process from remote session
Microsoft Sentinel (KQL)

Low Privileged process spawning elevated process from remote session

Already have an account?