Non-privileged Usage of Reg or Powershell

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Search for usage of reg or Powershell by non-privileged users to modify service configuration in registry