Potential Persistence Attempt Via Run Keys Using Reg.EXE

SigmaHQ Detections@sigmaHQ

•updated Nov 26, 2025•0•0•0

Detects suspicious command line reg.exe tool adding key to RUN key in Registry