OTRF/detection-hackathon-apt29

12.C) Query Registry

Cyb3rWard0g opened this issue · 0 comments

Cyb3rWard0g commented

Description

The attacker then enumerates software installed by the user documented in the Windows Registry (T1012)