id: 7fce1d05-2297-48a4-a670-f28745819c8a
description: N/A
date: 2025-10-24
author: SigmaHQ Team
rule_metadata:
    - id: 46dd5308-4572-4d12-aa43-8938f0184d4f
      title: Bypass UAC Using DelegateExecute
regression_tests_info:
    - name: Positive Detection Test
      type: evtx
      provider: Microsoft-Windows-Sysmon
      match_count: 1
      path: regression_data/rules/windows/registry/registry_set/registry_set_bypass_uac_using_delegateexecute/46dd5308-4572-4d12-aa43-8938f0184d4f.evtx
