1200KM / tag
windefend — logsource-service tag
15 related reference pages for logsource-service: windefend.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- LSASS Access Detected via Attack Surface Reduction · sigma-rule
- Microsoft Defender Tamper Protection Trigger · sigma-rule
- PSExec and WMI Process Creations Block · sigma-rule
- Win Defender Restored Quarantine File · sigma-rule
- Windows Defender AMSI Trigger Detected · sigma-rule
- Windows Defender Configuration Changes · sigma-rule
- Windows Defender Exclusions Added · sigma-rule
- Windows Defender Exploit Guard Tamper · sigma-rule
- Windows Defender Grace Period Expired · sigma-rule
- Windows Defender Malware And PUA Scanning Disabled · sigma-rule
- Windows Defender Real-time Protection Disabled · sigma-rule
- Windows Defender Real-Time Protection Failure/Restart · sigma-rule
- Windows Defender Submit Sample Feature Disabled · sigma-rule
- Windows Defender Threat Detected · sigma-rule
- Windows Defender Virus Scanning Feature Disabled · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.