Potential Persistence Via Logon Scripts - Registry
Detects creation of "UserInitMprLogonScript" registry value which can be used as a persistence method by malicious actors
Sigma

Detects creation of "UserInitMprLogonScript" registry value which can be used as a persistence method by malicious actors

Already have an account?