Potential Persistence Via Event Viewer Events.asp

SigmaHQ Detections@sigmaHQ

•updated Mar 5, 2023•0•0•1

Detects potential registry persistence technique using the Event Viewer "Events.asp" technique