Potential PUA Protection Registry Modification

Ankit Mehta@Secvyn

•updated Jun 4, 2026•3•0•10

This rule detects modifications to registry keys or values associated with Potentially Unwanted Application (PUA) protection settings, specifically 'PUAProtection' and 'MpEnablePus'. Such modifications could indicate an attempt to disable or alter security features related to PUA detection.