Antivirus Filter Driver Disallowed On Dev Drive - Registry

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•5

Detects activity that indicates a user disabling the ability for Antivirus mini filter to inspect a "Dev Drive".