StrikeShark SharkLoader Registry Run Key Persistence via SystemSettings.exe
Detects the SharkLoader malware (StrikeShark campaign) establishing persistence by writing references to 'SystemSettings.exe' located within specific AppData working directories (e.g., 'xwreg', 'xgdf') into Windows Registry Run keys.
Microsoft Sentinel (KQL)
