Reg Add Suspicious Paths

Google SecOps@GoogleSecOps

•updated Jun 25, 2025•0•0•1

Detects when an adversary uses the reg.exe utility to add or modify new keys or subkeys