All Detections

Potential Windows Defender Tampering Via Wmic.EXE

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects potential tampering with Windows Defender settings such as adding exclusion using wmic

Sigma