Windows Defender Exclusions Added via Registry

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•15

Detects modifications to Windows Defender exclusion registry keys, which adversaries may use to disable or bypass antivirus scanning for specific files or paths.