UnCanny Coercion - PowerShell COM Activation of InstallServiceControl

Ibrahim Saud@tektrix

•updated Jun 20, 2026•0•0•9

Detects PowerShell activating the internal Store install-control class required for UnCanny coercion. This technique is associated with the UnCanny coercion method, which leverages a COM object to achieve privilege escalation or other malicious activities.