PowerShell Disabling Windows Defender Real-Time Monitoring via Set-MpPreference

Detects the execution of PowerShell commands using the 'Set-MpPreference' cmdlet with the '-DisableRealtimeMonitoring' parameter set to '$true', which disables real-time protection in Windows Defender.