12241200x8000000000000000176364Microsoft-Windows-Sysmon/Operationalwin-host-root-17044-47.attackrange.localT1101DeleteValue2022-08-23 05:22:58.688{58A7821C-6432-6304-C100-000000007802}4388C:\Windows\system32\reg.exeHKLM\System\CurrentControlSet\Control\Lsa\RunAsPPL