LoFP / t1547.009

t1547.009

Title	Tags
legitimate custom shim installations will also trigger this rule	t1546 t1546.011 t1547 t1547.009 windows sigma
operations performed through windows sccm or equivalent	t1547 t1547.009 windows sigma
read only access list authority	t1547 t1547.009 windows sigma