Potentially Suspicious Desktop Background Change Using Reg.EXE

심각도 보통 Sigma 탐지 룰. Detects the execution of "reg.exe" to alter registry keys that would replace the user's desktop background. This is a common technique used …

작성자: Stephen Lincoln @slincoln-aiq (AttackIQ) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본