Potential Registry Reconnaissance Via PowerShell Script — Detection Rule
Detects PowerShell scripts with potential registry reconnaissance capabilities. Adversaries may interact with the Windows registry to gather information about the system credentials, configuration, and installed software.