Registry write to SynapseAgent metrics_interval (bird-agent C2)

Arnold Chan@slaz

•updated Sep 4, 2026•0•0•0

Detects modifications to the 'metrics_interval' registry value within the 'Software\SynapseAgent' key. This activity suggests configuration changes to the SynapseAgent, which could indicate tampering with agent telemetry or polling frequency.