Windows Security Disabled
Detects attempts to disable Windows Defender/Security features via command line arguments targeting antivirus, behavior monitoring, real-time protection, and WMI autologger defender components.
Sigma

Detects attempts to disable Windows Defender/Security features via command line arguments targeting antivirus, behavior monitoring, real-time protection, and WMI autologger defender components.

Already have an account?