Detection rules › By eventMicrosoft-Windows-Windows-Defender event 50011 detection rule reference this event. View event page.Sigma (1)Windows Defender Real-time Protection Disabled severity high T1562.001