DefenderCheck Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•22

Detects the execution of DefenderCheck, a tool used to analyze Microsoft Defender signatures. This tool can be leveraged by adversaries to identify detection patterns and develop evasion techniques for their malware.