Skip to content
Threat Feed

Tag

Defender_evasion

1 brief RSS
high advisory

Windows Defender SpyNet Reporting Disabled via Registry Modification

Attackers disable Windows Defender SpyNet reporting by modifying specific registry keys, preventing telemetry data from being sent and allowing malicious activities to go undetected.

Splunk Enterprise +3 windows registry_modification defender_evasion
2r