Windows Defender Malware And PUA Scanning Disabled

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•20

Detects when the Windows Defender feature for scanning malware and potentially unwanted software is disabled. This is indicated by Event ID 5010 from the WinDefend service.