All Detections

ScreenSaver Registry Key Set

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026000

Detects registry key established after masqueraded .scr file execution using Rundll32 through desk.cpl

Sigma