ScreenSaver Registry Key Set — Detection Rule
Detects registry key established after masqueraded .scr file execution using Rundll32 through desk.cpl
Detects registry key established after masqueraded .scr file execution using Rundll32 through desk.cpl