All Detections

Hunt: Windows Disable Windows LogOff Button

avatar
Danny Y@zendannyy
updated Jun 29, 2026000

Hunting rule loosely modeled after Atomic Red Team T1112 test "Disable Windows LogOff Button". Correlate before alerting on.

Sigma