Delete Defender Scan ShellEx Context Menu Registry Key

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Detects deletion of registry key that adds 'Scan with Defender' option in context menu. Attackers may use this to make it harder for users to scan files that are suspicious.