All Detections

Windows Defender Exclusion Deleted

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025015

Detects when a Windows Defender exclusion has been deleted. This could indicate an attacker trying to delete their tracks by removing the added exclusions

Sigma