{
  "technique_id": "T1112",
  "name": "Modify Registry",
  "tactics": [
    "Defense Impairment",
    "Persistence"
  ],
  "platforms": [
    "Windows"
  ],
  "summary": "Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution. Access to specific areas of the Registry depends on account permissions, with some keys requiring administrator-level access. The built-in Windows command-line utility [Reg](https://attack.mitre.org/software/S0075) may be used for local or remote Registry modification...",
  "generated_by": "SOC Response Atlas by Basyrix"
}