Internet Explorer DisableFirstRunCustomize Enabled
Detects changes to the Internet Explorer "DisableFirstRunCustomize" value, which prevents Internet Explorer from running the first run wizard the first time a user starts the browser after installing Internet Explorer or Windows. This registry modification can be used by adversaries for defense evasion, potentially to suppress pop-ups that might alert a user to unusual browser behavior or to streamline the execution of malicious activities without user interaction.
Sigma
