Registry Disable System Restore (5de03871-5d46-4539-a82d-3aa992a69a83)
Detects the modification of the registry to disable a system restore on the computer
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Inhibit System Recovery - T1490 (f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a) | Attack Pattern | Registry Disable System Restore (5de03871-5d46-4539-a82d-3aa992a69a83) | Sigma-Rules | 1 |