DRAYN Malware Disabling Windows Auto-Update via AUOptions Registry Write
Detects modifications to the Windows Update registry keys that disable automatic updates. Attackers may perform this action to prevent the installation of security patches and maintain vulnerabilities on a compromised system.
Splunk (SPL)
