Potential Persistence Via CHM Helper DLL

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects when an attacker modifies the registry key "HtmlHelp Author" to achieve persistence