Suspicious Environment Variable Has Been Registered

SigmaHQ Detections@sigmaHQ

•updated Aug 17, 2023•0•0•1

Detects the creation of user-specific or system-wide environment variables via the registry. Which contains suspicious commands and strings