Disable MRT Through Registry

Rule Info

Name
Disable MRT Through Registry
Author
X__Junior
Description
Detects modification of 'DontOfferThroughWUAU' registry key to prevent Windows from offering this update even if it is available, disables Windows from offering updates related to the Malicious Software Removal Tool (MRT).
Date
2025-01-05 00:00:00
Modified
None
Id
65071532-b01d-47cd-89de-635d60162f84
Tags
attack.t1547.001
Type
Nextron Sigma feed only (private)

Rule History