Detects the modification of the registry to disable a system restore on the computer
Read the full analysis on IntelFusions