Pay2Key - Shutdown Disabled via shutdownwithoutlogon Registry Write
Detects modifications to the Windows Registry 'shutdownwithoutlogon' value within the 'Policies\System' key. This setting controls whether the 'Shut Down' option is available on the Windows logon screen. Adversaries may modify this to impede access to system power controls or as part of a configuration hardening/persistence tactic.
Cortex XDR
