Microsoft Defender For Endpoint Service Failed To Start

Rule Info

Name
Microsoft Defender For Endpoint Service Failed To Start
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects instances where the Microsoft Defender for Endpoint service failed to start. Review other messages to determine possible cause and troubleshooting steps.
Reference
https://learn.microsoft.com/en-us/defender-endpoint/event-error-codes
Date
2024-07-09 00:00:00
Modified
None
Id
aeb40d37-c134-4386-8f43-776fa78555a7
Tags
attack.defense-evasion attack.t1562.001
Type
Nextron Sigma feed only (private)

Rule History

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022