Registry Persistence via Service in Safe Mode — Detection Rule
Detects the modification of the registry to allow a driver or service to persist in Safe Mode.
Detects the modification of the registry to allow a driver or service to persist in Safe Mode.