Potential Registry Persistence Attempt Via DbgManagedDebugger — Detection Rule

Detects the addition of the "Debugger" value to the "DbgManagedDebugger" key in order to achieve persistence. Which will get invoked when an application crashes

Read the full analysis on IntelFusions