Event Triggered Execution via Registry Modification
Detects modification of registry keys that trigger event-based execution for persistence
Microsoft Sentinel (KQL)

Detects modification of registry keys that trigger event-based execution for persistence

Already have an account?