Registry Tampering Of Internal Tools Settings — Detection Rule

Detects registry modifications that tamper with internal Windows tools settings, commonly used by malware to disable security features or system tools

Read the full analysis on IntelFusions