<<< Hide Navigation Hide TOC >>>
WINEKEY Registry Modification (b98968aa-dbc0-4a9c-ac35-108363cbf8d5)
Detects potential malicious modification of run keys by winekey or team9 backdoor
Cluster A![]() |
Galaxy A![]() |
Cluster B![]() |
Galaxy B![]() |
Level![]() |
---|---|---|---|---|
WINEKEY Registry Modification (b98968aa-dbc0-4a9c-ac35-108363cbf8d5) | Sigma-Rules | Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) | Attack Pattern | 1 |