All Detections

Windows Registry Run Key Susp Locations

avatar
Danny Y@zendannyy
updated Apr 1, 2026044

Detects Windows registry run keys executing processes out of suspicious paths, for establishing persistence

YARA