Monitor for efsui.exe activity in your logs, particularly in conjunction with commands like lsass.exe . Ensure that only authorized personnel can execute the installdra command. How to Properly Install a DRA for Better Security
Run a full scan with your antivirus software to ensure the efsuiexe file is not a Trojan. efsuiexe efs installdra better