Registry Enumeration via WMI Stdregprov

심각도 보통 Sigma 탐지 룰. Detects the usage of wmic.exe to enumerate or read Windows registry via the WMI StdRegProv class read methods (EnumKey, EnumValues, GetStrin…

작성자: Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본