Detection rules › By catalog entry

Microsoft-Windows-Kernel-General

Catalog entry	Rules
Event ID 16	1

Event ID 16

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Critical Hive In Suspicious Location Access Bits Cleared severity high T1003,T1003.002

Back to all Microsoft-Windows-Kernel-General catalog entries