Disable Windows Event Logging Via Registry Key Modification
Detects tampering with the "Enabled" registry key to disable Windows event logging for a specific event channel. This activity is often performed by adversaries to evade detection by security tools and analysts.
Sigma
