Potential Suspicious Registry File Imported Via Reg.EXE — Detection Rule

Detects the import of '.reg' files from suspicious paths using the 'reg.exe' utility

Read the full analysis on IntelFusions