Disable Internal Tools or Feature in Registry
Detects registry modifications that change features of internal Windows tools (malware like Agent Tesla uses this technique)
Sigma

Detects registry modifications that change features of internal Windows tools (malware like Agent Tesla uses this technique)

Already have an account?