Disable Windows Security Center Notifications via Registry

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•13

Detects when the 'UseActionCenterExperience' registry value is set to 0, which disables Windows Security Center notifications. This can be used by adversaries for defense evasion to prevent users from being alerted to security issues.