Add Debugger Entry To AeDebug For Persistence

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•18

Detects when an attacker modifies the 'Debugger' value within the 'AeDebug' registry key to establish persistence. This mechanism ensures that a specified malicious executable or DLL is launched whenever an application crashes, providing a persistent foothold on the system.