6 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Detect Regsvcs with No Command Line Arguments | Medium |
| Detect Regsvcs with Network Connection | Medium |
| Detect Regsvcs Spawning a Process | Medium |
| Detect Regasm Spawning a Process | Medium |
| Potentially Suspicious Execution Of Regasm/Regsvcs From Uncommon Location | Medium |
| Potentially Suspicious Execution Of Regasm/Regsvcs With Uncommon Extension | Medium |
Showing 6 of 6