Tag
Attackers may attempt to disable system restore via registry modifications through the command line to prevent recovery after malicious activity.