Turn on raw volume write notifications| ID: oval:org.secpod.oval:def:28612 | Date: (C)2015-10-08 (M)2023-07-04 |
| Class: COMPLIANCE | Family: windows |
This policy setting controls whether raw volume write notifications are sent to behavior monitoring.
If you enable or do not configure this setting, raw write notifications will be enabled.
If you disable this setting, raw write notifications be disabled.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Defender\Real-time Protection!Turn on raw volume write notifications
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection!DisableRawWriteNotification
| Platform: |
| Microsoft Windows Server 2012 R2 |
