Potential CobaltStrike Service Installations - Registry

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•0

Detects known malicious service installs that appear in cases in which a Cobalt Strike beacon elevates privileges or lateral movement.