OpenVPN Connect PAC URL Injection via /tun-setup into HKCU Internet Settings
Detects modifications to the Windows Registry 'AutoConfigURL' setting under 'Internet Settings' initiated by the OpenVPNConnect.exe process. This registry key controls the automatic proxy configuration (PAC file) for the system or user, which can be abused by adversaries to redirect network traffic through a malicious proxy server.
CQL
