Explore Expel’s auto remediations: Delete registry key

This document explains Expel's 'delete registry key' auto-remediation for removing Windows Registry-based persistence used by malware (illustrated with an 'InfoGrabber' stealer example). It details the SOC workflow — detection of suspicious autorun entries, careful validation to avoid breaking legitimate functionality, customer approval, execution via EDR, and confirmation — and highlights risks, common targets, and when the action is appropriate.