COM Hijack via Sdclt (07743f65-7ec9-404a-a519-913db7118a8d)

Detects changes to 'HKCU\Software\Classes\Folder\shell\open\command\DelegateExecute'

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Abuse Elevation Control Mechanism - T1548 (67720091-eee3-4d2d-ae16-8264567f6f5b)	Attack Pattern	COM Hijack via Sdclt (07743f65-7ec9-404a-a519-913db7118a8d)	Sigma-Rules	1
Event Triggered Execution - T1546 (b6301b64-ef57-4cce-bb0b-77026f14a8db)	Attack Pattern	COM Hijack via Sdclt (07743f65-7ec9-404a-a519-913db7118a8d)	Sigma-Rules	1