NoEscape UI Lockdown via Task Manager/UAC Registry Changes
Detects modifications to Windows Registry keys associated with UI lockdown behaviors, specifically disabling Task Manager, altering User Account Control (UAC) settings, modifying auto-colorization, or resetting default UI tiles. These modifications are often used by malware or malicious actors to inhibit user interaction, bypass security prompts, or persist UI-level restrictions.
Sigma
