Service Registry Key Deleted Via Reg.EXE

심각도 높음 Sigma 탐지 룰. Detects execution of "reg.exe" commands with the "delete" flag on services registry key. Often used by attacker to remove AV software servic…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본