Change Winevt Channel Access Permission Via Registry — Detection Rule
Detects tampering with the "ChannelAccess" registry key in order to change access to Windows event channel.
Detects tampering with the "ChannelAccess" registry key in order to change access to Windows event channel.