Rule Info
Name
Registry Tampering Of Internal Tools Settings
Author
Swachchhanda Shrawan Poudel (Nextron Systems)
Description
Detects registry modifications that tamper with internal Windows tools settings, commonly used by malware to disable security features or system tools
Reference
Date
2026-10-18 00:00:00
Modified
None
Id
ccc946a3-f65a-432a-bb6f-efc6acc1fd27
Tags
attack.persistence attack.defense-impairment attack.t1112
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Swachchhanda Shrawan Poudel
Merge PR #5808 from @swachchhanda000 - Add and expand Internal Tools Registry Tampering detection
2026-10-18
Scan your endpoints, forensic images or collected files with our portable scanner THOR