Potential Persistence Via Logon Scripts - Registry — Detection Rule
Detects creation of "UserInitMprLogonScript" registry value which can be used as a persistence method by malicious actors
Detects creation of "UserInitMprLogonScript" registry value which can be used as a persistence method by malicious actors