Registry Run Key Persistence Creation or Modification
Detects the creation or modification of Windows Registry keys within the 'CurrentVersion\Run' path, a common technique used by adversaries to achieve persistence by ensuring arbitrary programs execute upon user logon.
SentinelOne
