Potential Register_App.Vbs LOLScript Abuse
Detects potential abuse of the "register_app.vbs" script, which is part of the Windows SDK. This script can register new VSS/VDS Providers as COM+ applications. Attackers may leverage this functionality to install malicious DLLs for persistence and execution.
Sigma
