Stickey key IFEO (Reg via command)
Detects scenarios where an attacker attempts to enable the Image File Execution Options (IFEO) debugger for sethc.
Sigma

Detects scenarios where an attacker attempts to enable the Image File Execution Options (IFEO) debugger for sethc.

Already have an account?