Suspicious Windows Defender Folder Exclusion Added Via Reg.EXE

심각도 보통 Sigma 탐지 룰. Detects the usage of "reg.exe" to add Defender folder exclusions. Qbot has been seen using this technique to add exclusions for folders with…

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본