Dumping of Sensitive Hives Via Reg.EXE

심각도 높음 Sigma 탐지 룰. Detects the usage of "reg.exe" in order to dump sensitive registry hives. This includes SAM, SYSTEM and SECURITY hives.

작성자: Teymur Kheirkhabarov, Endgame, JHasenbusch, Daniil Yugoslavskiy, oscd.community, frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본