MahirAli Khan
MahirAli Khan
### Summary of the Pull Request Added domain tailscale.com and twingate.com which was observed in below report and was abused by threat group Scattered Spider https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-320a https://blog.sekoia.io/scattered-spider-laying-new-eggs/ Added domain remoteassistance.support.services.microsoft.com...
### Summary of the Pull Request Detects the modification of registry values DefaultUserName,DefaultPassword and AutoAdminLogon to enable automatic logon. Attacker use this technique to achieve persistence. ### Changelog ### Example...