Service Registry Key Deleted Via Reg.EXE (05b2aa93-1210-42c8-8d9a-2fcc13b284f5)
Detects execution of "reg.exe" commands with the "delete" flag on services registry key. Often used by attacker to remove AV software services
Detects execution of "reg.exe" commands with the "delete" flag on services registry key. Often used by attacker to remove AV software services