All Detections

Scripted Diagnostics Turn Off Check Enabled - Registry

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026000

Detects enabling TurnOffCheck which can be used to bypass defense of MSDT Follina vulnerability

Sigma