LoFP / t1497

t1497

Title	Tags
administrators may enable or disable this feature that may cause some false positive.	t1021.001 t1112 T1176.001 t1219 t1486 t1490 t1497 endpoint splunk
legitimate administrative activities	t1059 t1059.012 t1082 t1098 t1497 t1497.001 t1562 t1562.001 t1562.003 macos gcp linux sigma