TiFlux RMM - Registry Modification for Defense Evasion (T1112)

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•5

Hunts for the TiFlux agent executing commands to modify Windows Defender or Firewall registry keys to lower security postures.