All Detections

Sysinternals SDelete Registry Keys

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

A General detection to trigger for the creation or modification of .*\Software\Sysinternals\SDelete registry keys. Indicators of the use of Sysinternals SDelete tool.

Sigma