capa-rules icon indicating copy to clipboard operation
capa-rules copied to clipboard

block system shutdown

Open mike-hunhoff opened this issue 1 year ago • 0 comments

Used by malware to prevent a target system from rebooting during sensitive operations.

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-shutdownblockreasoncreate

mike-hunhoff avatar Jan 17 '24 21:01 mike-hunhoff