Detect Anomalous .txt File Execution
Identifies a possible malware persistence mechanism where the registry is modified to run a non-text editor application each time the user interacts with a .txt file.
Microsoft Sentinel (KQL)

Identifies a possible malware persistence mechanism where the registry is modified to run a non-text editor application each time the user interacts with a .txt file.

Already have an account?