Potential Suspicious Activity Using SeCEdit

Google SecOps@GoogleSecOps

•updated Jun 25, 2025•1•0•2

Detects potential suspicious behaviour using secedit.exe. Such as exporting or modifying the security policy