Windows Credential Guard Registry Tampering Via CommandLine

심각도 높음 Sigma 탐지 룰. Detects attempts to add, modify, or delete Windows Credential Guard related registry keys or values via command line tools such as Reg.exe o…

작성자: Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본