All Detections

Microsoft Defender real time protection failure (native)

SIGMA Detection Rules@SIGMADetectionRules
updated Sep 6, 202505

Detects scenarios where an attacker tamper Defender RTP protection and disable it.

Sigma