Potential HackTool - Defendnot Security Center AV Registry Modification

Swachchhanda Shrawan Poudel (Nextron Systems)

Detects modification of the Microsoft Security Center AV registry keys, particularly those related with DisplayName, ProductEXE, or ReportingExe. These keys typically store information about antivirus products installed on the system, which is Windows Defender or third-party antivirus software. But, if these keys holds unexpected values or are modified in a suspicious manner, it could indicate an attempt to tamper with the security settings of the system.

2026-10-18 00:00:00

None

9991c683-05aa-47b7-a865-df14dc4b9dc4

attack.defense-impairment attack.t1685

Community Rule

Swachchhanda Shrawan Poudel

Merge PR #5469 from @swachchhanda000 - Hacktool - Defendnot Execution

2026-10-19