All Detections

Windows Defender Disabled via PowerShell/sc.exe (TOKYOCORE pre-wipe)

avatar
Duo Tech@duotech
updated Jul 27, 2026108

Generic rule content from file: Windows Defender Disabled via PowerShell/sc.exe (TOKYOCORE pre-wipe)

Cortex XDR