Rule Info
Name
Disable Antivirus Autostart
Author
X__Junior
Description
Detects disable antivirus products autostart capability
Date
2024-10-28 00:00:00
Modified
None
Id
9cc65678-2371-45fd-9f83-40bb209387a2
Tags
attack.defense-evasion attack.t1112
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR