Suspicious Reg Add BitLocker (0e0255bf-2548-47b8-9582-c0955c9283f5)
Detects suspicious addition to BitLocker related registry keys via the reg.exe utility
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Data Encrypted for Impact - T1486 (b80d107d-fa0d-4b60-9684-b0433e8bdba0) | Attack Pattern | Suspicious Reg Add BitLocker (0e0255bf-2548-47b8-9582-c0955c9283f5) | Sigma-Rules | 1 |