Antivirus Filter Driver Disallowed On Dev Drive - Registry

심각도 높음 Sigma 탐지 룰. Detects activity that indicates a user disabling the ability for Antivirus mini filter to inspect a "Dev Drive".

작성자: @kostastsale, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본