Detects direct modification of autostart extensibility point (ASEP) in registry using reg.exe.
Read the full analysis on IntelFusions