ATT&CK technique
View on MITRE ATT&CK →
T1689
Downgrade Attack
Defense Impairment
3 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | PowerShell 4104 Hunting | production | 2026-09-03 |
| splunk | Windows Downdate Registry Activity | production | 2026-05-13 |
| sigma | LSA PPL Protection Setting Modification via CommandLine | test | 2026-03-13 |