Endpoint protection setting

1actions

1reasons

1sources

Livestatus

One setting of the endpoint protection product on the host.

Identified by: sparklogs.config_change.target, which carries a name.

Action	Reported by	What that reason says
updated	av_config_changed on Microsoft Defender Antivirus event log	Microsoft Defender recorded a configuration change to a protection-sensitive setting.