t1546.012 | LoFP

t1546.012

Title	Tags
false positives may be present and tuning will be required before turning into a ttp or notable.	t1546.012 endpoint splunk
legitimate applications registering their binary from on of the suspicious locations mentioned above (tune it)	t1546 t1546.012 windows sigma
there are many legitimate applications that must execute upon system startup and will use these registry keys to accomplish that task.	t1546 t1546.012 endpoint splunk