OpnKey Ransomware Disables Recovery via bcdedit
Detects the use of bcdedit.exe to disable automatic system recovery features, a common technique used by ransomware and other malware to prevent automated restoration of the operating system after compromise.
Sigma
