Detects the usage of the "reg.exe" utility to disable PPL protection on the LSA process
Already have an account? Log in