NoEscape Wallpaper Lock via NoChangingWallPaper Registry Value
Detects modifications to the Windows Registry that disable the ability for a user to change their desktop wallpaper by setting the 'NoChangingWallPaper' value within the 'ActiveDesktop' policy key to '1'. This is often associated with system tampering to enforce restricted user environments.
Sigma

