sigma
sigma copied to clipboard
Add registry_set_change_winevt_channelaccess
just a walk on any-run