We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
VirTool:Win32/DefenderTamperingRestore
Detected by Microsoft Defender Antivirus
Aliases: No associated aliases
Summary
This detection is for suboptimal configurations that may prevent Microsoft Defender Antivirus from functioning properly.
If you see this detection, a suboptimal configuration was detected, and Microsoft Defender Antivirus will auto-heal by automatically resetting to more secure configurations.