UAC bypass via .NET Code Profiler DLL Hijack

Identifies potential User Account Control (UAC) bypass activity leveraging the .NET Code Profiler mechanism to achieve elevated code execution through DLL hijacking. Attackers may attempt to load arbitrary profiler libraries into high-integrity processes.

• Platform: Windows
• Severity: High
• MITRE Tactic: Privilege Escalation
• MITRE Techniques: T1548, T1548.002

Back to all rules