All Detections

Registry Persistence via Explorer Run Key

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects a possible persistence mechanism using RUN key for Windows Explorer and pointing to a suspicious folder

Sigma