Hunt: Windows Get Windows Defender exclusion settings WMIC

Danny Y@zendannyy

•updated Jun 29, 2026•0•0•4

Hunting rule loosely based off of Atomic Red Team T1518.001 test "Get Windows Defender exclusion settings using WMIC". No public in-the-wild intel reference available; correlate before alerting.