Suspicious Space Characters in RunMRU Registry Path - ClickFix — Detection Rule
Detects the occurrence of numerous space characters in RunMRU registry paths, which may indicate execution via phishing lures using clickfix techniques to hide malicious commands in the Windows Run dialog box from naked eyes.