Registry Run Key Modification

Detects modifications to Run/RunOnce registry keys commonly used by malware and threat actors for persistence.