Access To .Reg/.Hive Files By Uncommon Applications — Detection Rule
Detects file access requests to files ending with either the ".hive"/".reg" extension, usually associated with Windows Registry backups.
Detects file access requests to files ending with either the ".hive"/".reg" extension, usually associated with Windows Registry backups.