detecting-t1548-abuse-elevation-control-mechanism

【效率与协作】Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.

独立 GitHub 快照 · 自动分类 · 以原作者文档为准