SNAKE Malware Covert Registry Key Detection

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•20

Detects any registry event that targets the key 'SECURITY\Policy\Secrets\n', which is a known indicator of SNAKE malware activity as described by CISA. This specific registry key is used by SNAKE malware for covert storage.