Windows Defender Service Disabled - Registry

심각도 높음 Sigma 탐지 룰. Detects when an attacker or tool disables the Windows Defender service (WinDefend) via the registry

작성자: Ján Trenčanský, frack113, AlertIQ, Nasreddine Bencherchali · 원본 라이선스: DRL 1.1 · SigmaHQ 원본