Potential Regsvr32 Commandline Flag Anomaly

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Detects a potential command line flag anomaly related to "regsvr32" in which the "/i" flag is used without the "/n" which should be uncommon.