Azorult Malware Registry Persistence
Detects the presence of a registry key created during Azorult malware execution. Specifically, it looks for modifications to registry keys ending with '\services\localNETService' within the 'SYSTEM\' hive, which is a known indicator for Azorult.
Sigma

