eric_capuano
06/16/2018, 6:01 PM{"name":"pack/windows-attacks/Registry_Key","hostIdentifier":"host","calendarTime":"Sat Jun 16 17:51:45 2018 UTC","unixTime":1529171505,"epoch":0,"counter":0,"decorations":{"host_uuid":"FA6D1149-191E-4194-DDDB-D02788B4797D","hostname":"hostname"},"columns":{"data":"","key":"PATH\TO\REGISTRY\KEY","mtime":"1523639265","name":"6&5256305&0&1"},"action":"added"}
Next step is just forcing a detection for trial and error, but thought I'd check here first