System Information Discovery via Registry Queries — Detection Rule

Detects attempts to query system information directly from the Windows Registry.

Read the full analysis on IntelFusions