Rule Info
Tags
attack.defense_evasion DEMO
Name
Internet Explorer DisableFirstRunCustomize Enabled
Id
ab567429-1dfb-4674-b6d2-979fd2f9d125
Date
2023-05-16 00:00:00
Modified
None
Description
Detects changes to the Internet Explorer "DisableFirstRunCustomize" value, which prevents Internet Explorer from running the first run wizard the first time a user starts the browser after installing Internet Explorer or Windows.
Author
Nasreddine Bencherchali (Nextron Systems)
Type
Community Rule
Link to Public Repo
Rule History
Title
Author
Commit
Date
Scan your endpoints, forensic images or collected files with our portable scanner THOR