Add DisallowRun Execution to Registry (275641a5-a492-45e2-a817-7c81e9d9d3e9)
Detect set DisallowRun to 1 to prevent user running specific computer program
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Modify Registry - T1112 (57340c81-c025-4189-8fa0-fc7ede51bae4) | Attack Pattern | Add DisallowRun Execution to Registry (275641a5-a492-45e2-a817-7c81e9d9d3e9) | Sigma-Rules | 1 |