Windows Defender protection tampering via registry
Detects suspicious processes modifying Windows Defender configuration settings via registry to disable protection features.
- Plataforma: Windows
- Severidad: High
- Táctica MITRE: Evasión de defensas
- Técnicas MITRE: T1562, T1562.001