Privilege Escalation via YellowKey/GreenPlasma
Detects SYSTEM privilege escalation attempts via ctfmon.exe or cloudfiles.exe processes.
Microsoft Sentinel (KQL)
Detects SYSTEM privilege escalation attempts via ctfmon.exe or cloudfiles.exe processes.
Already have an account?