Skip to content

Hide Navigation Hide TOC

Wow6432Node Windows NT CurrentVersion Autorun Keys Modification (480421f9-417f-4d3b-9552-fd2728443ec8)

Detects modification of autostart extensibility point (ASEP) in registry.

Cluster A Galaxy A Cluster B Galaxy B Level
Registry Run Keys / Startup Folder - T1547.001 (9efb1ea7-c37b-4595-9640-b7680cd84279) Attack Pattern Wow6432Node Windows NT CurrentVersion Autorun Keys Modification (480421f9-417f-4d3b-9552-fd2728443ec8) Sigma-Rules 1
Registry Run Keys / Startup Folder - T1547.001 (9efb1ea7-c37b-4595-9640-b7680cd84279) Attack Pattern Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) Attack Pattern 2