Disabling Control Panel via Registry Modification

The analytic detects registry modifications that disable the Control Panel on Windows systems. It monitors changes to the registry path "*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel" with a value of "0x00000001". This activity is commonly used by malware to prevent users from accessing the Control Panel, hindering the removal of malicious artifacts and persistence mechanisms. If confirmed malicious, this could allow attackers to maintain control over the infected machine and prevent remediation efforts.