Non-Administrators Allowed To Install Drivers For Device Setup Classes

Rule Info

Name
Non-Administrators Allowed To Install Drivers For Device Setup Classes
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects changes to the group policy to allow non-administrators to install drivers for device setup classes. If enabled, this setting might weaken your security posture in cases where one of the allowed drivers gets compromised.
Date
2024-01-24 00:00:00
Modified
None
Id
153b151b-1cd3-475b-b1ab-5d46fe3c9e86
Tags
attack.defense-evasion attack.t1564.001
Type
Nextron Sigma feed only (private)

Rule History