Hunt - Windows Modify Registry of Current User Profile - cmd (T1112)

Danny Y@zendannyy

•updated Jun 29, 2026•0•0•0

Hunting rule loosely modeled after Atomic Red Team T1112 test "Modify Registry of Current User Profile - cmd". No public in-the-wild intel reference available; correlate before alerting.