CAPEC-579Replace Winlogon Helper DLL

Winlogon is a part of Windows that performs logon actions. In Windows systems prior to Windows Vista, a registry key can be modified that causes Winlogon to load a DLL on startup. Adversaries may take advantage of this feature to load adversarial code at startup. Metadata: detailed CAPEC pattern, status draft. Underlying weakness: CWE-15. Mapped ATT&CK technique: [object Object]. Related CAPEC pattern: [object Object].