Potential Persistence Via New AMSI Providers - Registry
Detects when an attacker registers a new AMSI provider in order to achieve persistence
Sigma

Detects when an attacker registers a new AMSI provider in order to achieve persistence

Already have an account?