<<< Hide Navigation Hide TOC >>>
Add DisallowRun Execution to Registry (275641a5-a492-45e2-a817-7c81e9d9d3e9)
Detect set DisallowRun to 1 to prevent user running specific computer program
Cluster A![]() |
Galaxy A![]() |
Cluster B![]() |
Galaxy B![]() |
Level![]() |
---|---|---|---|---|
Modify Registry - T1112 (57340c81-c025-4189-8fa0-fc7ede51bae4) | Attack Pattern | Add DisallowRun Execution to Registry (275641a5-a492-45e2-a817-7c81e9d9d3e9) | Sigma-Rules | 1 |