Run Once Task Execution as Configured in Registry (198effb6-6c98-4d0c-9ea3-451fa143c45c)
This rule detects the execution of Run Once task as configured in the registry
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Modify Registry - T1112 (57340c81-c025-4189-8fa0-fc7ede51bae4) | Attack Pattern | Run Once Task Execution as Configured in Registry (198effb6-6c98-4d0c-9ea3-451fa143c45c) | Sigma-Rules | 1 |