M1025 - Privileged Process Integrity
Type: course-of-action
Protect processes with high privileges that can be used to interact with critical system components through use of protected process light, anti-process injection defenses, or other process integrity enforcement measures.