Registry Modification Via Regini.EXE — Detection Rule

Detects the execution of regini.exe which can be used to modify registry keys, the changes are imported from one or more text files.

Read the full analysis on IntelFusions