Hunt: Windows Enable Local and Remote Symbolic Links via reg.exe (T1222)

Danny Y@zendannyy

•updated Jun 29, 2026•0•0•1

Hunting rule for T1222 "Enable Local and Remote Symbolic Links via reg.exe". No public in-the-wild intel reference available; correlate before alerting.