All Detections

Tamper Windows Defender Remove-MpPreference

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202509

Detects attempts to remove Windows Defender configurations using the 'MpPreference' cmdlet

Sigma