Potential AutoLogger Sessions Tampering
Detects attempts to tamper with autologger trace sessions by modifying specific registry values. This technique is often used by attackers to disable or impair logging, particularly for Windows Event Log and Windows Defender related logs, to evade detection.
Sigma
