Run Once Task Execution as Configured in Registry — Detection Rule

This rule detects the execution of Run Once task as configured in the registry

Read the full analysis on IntelFusions