Suspicious persistence via registry modification

Adversaries may abuse the registry to achieve persistence by modifying the keys that are unlikely modified by legitimate processes.

• Platform: Windows
• Severity: High
• MITRE Tactic: Persistence
• MITRE Techniques: T1547, T1547.001

Back to all rules