UAC Bypass Registry Key Deletion for Anti-Forensics

Jorden Smith@Jorden

•updated Jan 8, 2026•0•16

Detects deletion of ms-settings registry keys used for UAC bypass techniques, indicating anti-forensics activity to remove evidence of privilege escalation.