Skip to content
Threat Feed

Product

Windows Malware Protection Engine

1 brief RSS
high advisory

MpCmdRun Execution with RemoveDefinitions Argument

The execution of MpCmdRun.exe with the '-RemoveDefinitions' argument, used to remove definitions from the Windows Malware Protection Engine, can indicate potential malware activity or attempts to bypass security measures.

Windows Malware Protection Engine +3 defense-evasion endpoint mpcmdrun malware
2r