Potential PendingFileRenameOperations Tamper (4eec988f-7bf0-49f1-8675-1e6a510b3a2a)
Detect changes to the "PendingFileRenameOperations" registry key from uncommon or suspicious images lcoations to stage currently used files for rename after reboot.
Detect changes to the "PendingFileRenameOperations" registry key from uncommon or suspicious images lcoations to stage currently used files for rename after reboot.