Windows Defender Real-time Protection Disabled

SigmaHQ Detections@sigmaHQ

•updated Sep 22, 2024•0•30

Detects when Windows Defender Real-time Protection is disabled. This event may not contain detailed information about the initiator, requiring further investigation.