Техническая информация
- [HKLM\SYSTEM\CurrentControlSet\Services\NSecKrnl] 'ImagePath' = '<DRIVERS>\nseckrnl.sys'
- 'NSecKrnl' <DRIVERS>\nseckrnl.sys
- <SYSTEM32>\securityhealthsystray.exe
- <SYSTEM32>\securityhealthservice.exe
- <DRIVERS>\nseckrnl.sys
- %ALLUSERSPROFILE%\microsoft\windows security health\logs\shs-02272026-174615-7-7f-19041.1.amd64fre.vb_release.191206-1406.etl
- '<SYSTEM32>\securityhealthservice.exe'