UAC Bypass via CMSTPLUA COM Interface
Detects a User Account Control (UAC) bypass attempt by abusing the CMSTPLUA COM interface. Adversaries can leverage this legitimate Windows binary to execute code with elevated privileges without prompting the user. This technique is used by malware such as SILENTCONNECT.
Sigma
