Registry Manipulation via WMI Stdregprov

심각도 보통 Sigma 탐지 룰. Detects the usage of wmic.exe to modify Windows registry via the WMI StdRegProv class write methods (CreateKey, DeleteKey, SetStringValue, e…

작성자: Daniel Koifman (KoifSec) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본