Operation XENOFISCAL - Regedit modifying Edgre Key
Detects user or script launching regedit.exe with command lines targeting the specific 'Edgre' run key, which is associated with persistence mechanisms used by the XenoRAT malware.
Microsoft Sentinel (KQL)
