NoEscape Registry Writes to Desktop/AutoColorization/Explorer Policy Keys
Detects specific registry modifications indicative of the NoEscape ransomware, including changes to desktop wallpaper settings, auto-colorization preferences, and Explorer shell policies used to restrict user interaction or modify system aesthetics as part of an extortion campaign.
Sigma
