Common Information
Type Value
Value
rule final_policy_key {
	strings:
		$str1 = "Providers" nocase
		$str2 = "Trust" nocase
		$str3 = "FinalPolicy" nocase
	condition:
		all of them
}
Category
Type Yara Rule
Misp Type
Description
Details Published Attributes CTI Title
Details Pdf 2017-09-19 75 Subverting Trust in Windows