Windows EventLog Autologger Session Registry Modification Via CommandLine

심각도 높음 Sigma 탐지 룰. Detects attempts to disable Windows EventLog autologger sessions via registry modification. The AutoLogger event tracing session records eve…

작성자: Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본