Suspicious Registry Modification From ADS Via Regini.EXE

심각도 높음 Sigma 탐지 룰. Detects the import of an alternate data stream with regini.exe, regini.exe can be used to modify registry keys.

작성자: Eli Salem, Sander Wiebing, oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본