Pandemic Windows Implant Registry Key
Detects the creation or modification of a specific registry key path associated with the 'Pandemic' Windows implant. The key path observed is '\SYSTEM\CurrentControlSet\services\null\Instance'. This rule helps identify the presence or activity of the Pandemic malware.
Sigma
