Potential Persistence Via Logon Scripts - CommandLine — Detection Rule
Detects the addition of a new LogonScript to the registry value "UserInitMprLogonScript" for potential persistence
Detects the addition of a new LogonScript to the registry value "UserInitMprLogonScript" for potential persistence