Detection rules › By eventMicrosoft-Windows-DistributedCOM event 100011 detection rule reference this event. View event page.Sigma (1)Local Privilege Escalation Indicator TabTip severity high T1557.001