Follow this installation guideline if facing an installation issue. Note: ghauri has to be cloned/installed from github for this switch to work for futures updates, for older version users they have ...
description: The following analytic detects the use of Regsvr32.exe to register DLLs from suspicious paths such as AppData, ProgramData, or Windows Temp directories. It leverages data from Endpoint ...