Registry registry data = 1 AND registry key name = *Windows Defender* AND registry value name = *disable* AND action type = set_registry_value Process initiator signature = Signed , Unsigned , Invalid Signature , Weak Hash , cgo signature = Signed , Unsigned , Invalid Signature , Weak Hash AND initiator signer != Symantec Corporation AND AVG Technologies USA, LLC AND Akeo Consulting AND Avast Software s.r.o. AND BeyondTrust Software Inc AND Bromium, Inc. AND Digital Communications Inc AND FireEye, Inc. AND Forcepoint LLC AND Google Inc AND Google LLC AND HP Inc. AND Invincea, Inc. AND Kaspersky Lab AND Netwrix Corporation AND OPSWAT, Inc. AND Palo Alto Networks (Netherlands) B.V. AND Rapid7 LLC AND Sangfor Technologies Co.,Ltd AND Snow Software AB AND Tanium Inc. AND Teradici Corporation AND Trend Micro, Inc. AND Websense, Inc. AND ZOHO Corporation private Limited AND Zoom Video Communications, Inc. AND Zscaler, Inc. AND Barracuda Networks, Inc. AND LiveQoS Incorporated AND cgo signer != Symantec Corporation AND AVG Technologies USA, LLC AND Akeo Consulting AND Avast Software s.r.o. AND BeyondTrust Software Inc AND Bromium, Inc. AND Digital Communications Inc AND FireEye, Inc. AND Forcepoint LLC AND Google Inc AND Google LLC AND HP Inc. AND Invincea, Inc. AND Kaspersky Lab AND Netwrix Corporation AND OPSWAT, Inc. AND Palo Alto Networks (Netherlands) B.V. AND Rapid7 LLC AND Sangfor Technologies Co.,Ltd AND Snow Software AB AND Tanium Inc. AND Teradici Corporation AND Trend Micro, Inc. AND Websense, Inc. AND ZOHO Corporation private Limited AND Zoom Video Communications, Inc. AND Zscaler, Inc. AND Barracuda Networks, Inc. AND LiveQoS Incorporated AND initiated by != msmpeng.exe AND svchost.exe AND mpcmdrun.exe AND mpsigstub.exe AND deviceenroller.exe AND securityhealthservice.exe AND mssense.exe AND taniumclient.exe AND setupplatform.exe AND ccmexec.exe AND configsecuritypolicy.exe AND securityhealthsystray.exe AND securityhealthhost.exe AND msiexec.exe AND omadmclient.exe AND monitoringhost.exe AND logonui.exe AND cgo name != msmpeng.exe AND svchost.exe AND mpcmdrun.exe AND mpsigstub.exe AND deviceenroller.exe AND securityhealthservice.exe AND mssense.exe AND taniumclient.exe AND setupplatform.exe AND ccmexec.exe AND configsecuritypolicy.exe AND securityhealthsystray.exe AND securityhealthhost.exe AND msiexec.exe AND omadmclient.exe AND monitoringhost.exe AND logonui.exe Host host os = windows