4 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Suspicious Cross-User Process Spawn | Medium |
| Potentially Suspicious Image Load of Offreg.dll | Medium |
| Registry Hive File Staged Outside Standard User Profile Path | High |
| Potentially Suspicious Explicit Credential Local Logon | Medium |
Showing 4 of 4