A Sigma rule for registry Run-key persistence catches the most-taught autostart technique on Windows: an attacker writing a value u...
Sigma Rule for Registry Run-Key Persistence (ID 13)
From Logs to Threats: SIEM Correlation Rules for Real Attacks
