Potential Persistence Via Logon Scripts - CommandLine

SigmaHQ Detections@sigmaHQ

•updated Jun 9, 2023•0•0•1

Detects the addition of a new LogonScript to the registry value "UserInitMprLogonScript" for potential persistence