CrashControl CrashDump Disabled (2ff692c2-4594-41ec-8fcb-46587de769e0)

Detects disabling the CrashDump per registry (as used by HermeticWiper)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Modify Registry - T1112 (57340c81-c025-4189-8fa0-fc7ede51bae4)	Attack Pattern	CrashControl CrashDump Disabled (2ff692c2-4594-41ec-8fcb-46587de769e0)	Sigma-Rules	1
Hide Artifacts - T1564 (22905430-4901-4c2a-84f6-98243cb173f8)	Attack Pattern	CrashControl CrashDump Disabled (2ff692c2-4594-41ec-8fcb-46587de769e0)	Sigma-Rules	1