Detects suspicious addition to BitLocker related registry keys via the reg.exe utility
Read the full analysis on IntelFusions