Disable System Firewall — Detection Rule

Detects disabling of system firewalls which could be used by adversaries to bypass controls that limit usage of the network.

Read the full analysis on IntelFusions