Skip to content
Threat Feed
Subscribe

Tag

Security-Center

2 briefs RSS
medium advisory

Detection of Malicious Security Center AV Registry Tampering

This detection targets unauthorized modifications to Windows Security Center registry keys used by threat actors to spoof or disable antivirus product reporting.

defense-impairment windows registry security-center
1r
high advisory

Defendnot HackTool Scheduled Task Persistence and Defense Impairment

The Defendnot hacktool utilizes a custom scheduled task for persistence and abuses the Windows Security Center API to register itself as a fake antivirus product to disable Windows Defender.

hacktool persistence defense-impairment security-center windows
1r 1t