Hiding User Account Via SpecialAccounts Registry Key - CommandLine

심각도 보통 Sigma 탐지 룰. Detects changes to the registry key "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\Userlist" where the value is…

작성자: @Kostastsale, TheDFIRReport · 원본 라이선스: DRL 1.1 · SigmaHQ 원본