Disabling Task Manager via Registry Modification

The analytic identifies modifications to the Windows registry that disable Task Manager. It specifically looks for changes to the registry path "*\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DisableTaskMgr" with a value of "0x00000001". This activity is commonly associated with malware such as RATs, Trojans, and worms, which disable Task Manager to prevent users from terminating malicious processes, thereby maintaining persistence and control over the infected system.