Access To .Reg/.Hive Files By Uncommon Applications

심각도 낮음 Sigma 탐지 룰. Detects file access requests to files ending with either the ".hive"/".reg" extension, usually associated with Windows Registry backups.

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본