Add SafeBoot Keys Via Reg Utility

심각도 높음 Sigma 탐지 룰. Detects execution of "reg.exe" commands with the "add" or "copy" flags on safe boot registry keys. Often used by attacker to allow the ranso…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본