ClickOnce Trust Prompt Tampering — Detection Rule

Detects changes to the ClickOnce trust prompt registry key in order to enable an installation from different locations such as the Internet.

Read the full analysis on IntelFusions