"{0cce9210-69ae-11d9-bed3-505054503030}": "Security State Change", "{0cce9211-69ae-11d9-bed3-505054503030}": "Security System Extension", "{0cce9212-69ae-11d9-bed3 ...
description: The following analytic identifies modifications to registry keys commonly used for persistence mechanisms. It leverages data from endpoint detection sources like Sysmon or Carbon Black, ...