File Association Hijacking for Denial of Service
Detects the modification of file association registry keys to hijack the default 'open' action. This technique is used by malware to prevent users from launching applications or opening files by redirecting the action to a command that displays a message, effectively causing a denial of service on the endpoint.
Sigma
