Registry Modification Via Regini.EXE
Detects the execution of 'regini.exe', a legitimate Windows utility that can be used to modify registry keys by importing changes from one or more text files. This activity can be indicative of an adversary attempting to alter system configurations, achieve persistence, or evade defenses by manipulating the Windows Registry.
Sigma
