Disable Windows Event Logging Via Registry — Detection Rule
Detects tampering with the "Enabled" registry key in order to disable Windows logging of a Windows event channel
Detects tampering with the "Enabled" registry key in order to disable Windows logging of a Windows event channel