Windows Search Disabled via Explorer NoFind Policy
Detects the modification of the 'NoFind' registry value within the 'Policies\Explorer' key, which is used to disable the Windows Search functionality for users. Adversaries or unauthorized users may modify this setting to impair system search capabilities or as part of a broader system hardening or lockdown policy.
Sigma
