AMSI Disabled via Registry Modification

심각도 높음 Sigma 탐지 룰. Detects attempts to disable AMSI (Anti-Malware Scan Interface) by modifying the AmsiEnable registry value. Anti-Malware Scan Interface (AMSI…

작성자: Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본