Tag
medium
threat
Windows Registry Modification to Suppress Defender Notifications
1 rule 1 TTPAdversaries, including those using Azorult malware, modify the 'Notification_Suppress' registry key to disable Windows Defender alerts and facilitate stealthy persistence.
Windows
Azorult
defense-evasion
registry
1r
1t
medium
threat
Tampering with Windows Security Center Notifications
1 rule 1 TTPAdversaries, including the Azorult malware group, modify registry keys to disable Windows Security Center notifications as a defense evasion tactic to suppress system alerts.
Windows
Azorult
defense-evasion
registry-modification
1r
1t