Potential Persistence Via GlobalFlags (36803969-5421-41ec-b92f-8500f79c23b0)

Detects registry persistence technique using the GlobalFlags and SilentProcessExit keys

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Image File Execution Options Injection - T1546.012 (6d4a7fb3-5a24-42be-ae61-6728a2b581f6)	Attack Pattern	Potential Persistence Via GlobalFlags (36803969-5421-41ec-b92f-8500f79c23b0)	Sigma-Rules	1
Image File Execution Options Injection - T1546.012 (6d4a7fb3-5a24-42be-ae61-6728a2b581f6)	Attack Pattern	Event Triggered Execution - T1546 (b6301b64-ef57-4cce-bb0b-77026f14a8db)	Attack Pattern	2