Detection rules › By eventMicrosoft-Windows-CodeIntegrity event 31041 detection rule reference this event. View event page.Sigma (1)CodeIntegrity - Disallowed File For Protected Processes Has Been Blocked severity high