System Restore Registry Modification via CommandLine — Detection Rule
Detects system restore registry modification via command line, which can be used by adversaries to disable system restore on the computer.
Detects system restore registry modification via command line, which can be used by adversaries to disable system restore on the computer.