Unusual process modified registry run key
Identifies an attempt by unusual Windows native processes to modify the run key and gain persistence on users logons or machine reboots.
- Plataforma: Windows
- Severidad: High
- Táctica MITRE: Persistencia
- Técnicas MITRE: T1547, T1547.001