Malformed wevtutil Command Targeting Misspelled Defender Log Channel
Detects the use of the wevtutil.exe utility to clear the Microsoft-Windows-Defender/Operational event log, a technique used by adversaries to disrupt security monitoring and hide malicious activity.
Cortex XDR
