IE Change Domain Zone

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•12

This rule detects modifications to the Internet Explorer ZoneMap Domains registry key, which can be used to add domains to specific security zones (e.g., Trusted Sites). Adversaries might modify these settings to lower security restrictions for malicious websites or to bypass security prompts.