SafeBoot Registry Key Deleted Via Reg.EXE

심각도 높음 Sigma 탐지 룰. Detects execution of "reg.exe" commands with the "delete" flag on safe boot registry keys. Often used by attacker to prevent safeboot execut…

작성자: Nasreddine Bencherchali (Nextron Systems), Tim Shelton · 원본 라이선스: DRL 1.1 · SigmaHQ 원본