Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding two registry modifications detections to registry_set_disable_function_user.yml #4568

Merged
merged 5 commits into from
Nov 20, 2023

Conversation

LucaInfoSec
Copy link
Contributor

@LucaInfoSec LucaInfoSec commented Nov 14, 2023

Summary of the Pull Request

Adding two registry value NoDispCPL and NoDispBackground based on Malwarebytes detections

Changelog

update: Disable Internal Tools or Feature in Registry - Increase coverage by adding 2 new values, namely NoDispCPL and NoDispBackground

Example Log Event

N/A

Fixed Issues

N/A

SigmaHQ Rule Creation Conventions

  • If your PR adds new rules, please consider following and applying these conventions

@github-actions github-actions bot added Rules Windows Pull request add/update windows related rules labels Nov 14, 2023
@nasbench nasbench self-assigned this Nov 14, 2023
@nasbench nasbench added the Work In Progress Some changes are needed label Nov 14, 2023
@nasbench nasbench removed the Work In Progress Some changes are needed label Nov 20, 2023
@nasbench nasbench added the 2nd Review Needed PR need a second approval label Nov 20, 2023
@phantinuss phantinuss merged commit 1cc2a6c into SigmaHQ:master Nov 20, 2023
11 checks passed
@nasbench nasbench removed the 2nd Review Needed PR need a second approval label Nov 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Rules Windows Pull request add/update windows related rules
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants